ERP controls that survive the audit.
Independent consulting for internal audit directors, controllers, and IT audit managers configuring, migrating, or remediating ERP systems against SOX Section 302 and 404. We scope, design, and evidence controls — we do not resell software.
A control that isn't evidenced doesn't exist
Most SOX ERP failures are not control-design failures. They are evidence failures — a control that runs correctly in production but leaves nothing an external auditor can independently test. Segregation-of-duties conflicts introduced during a platform migration, IT general controls that exist in a runbook but not in the system, quarter-end journal entries with no system-enforced approval trail.
We work the ERP layer specifically: SAP, Oracle, Dynamics 365, Odoo, PeopleSoft, ServiceNow, and Microsoft platforms, mapped against PCAOB AS 2201 and the COSO 2013 framework. The output is a control matrix an external auditor can walk without a translator.
Six foundations of an ERP SOX programme
Each guide below is a full treatment of one recurring evaluation question, with a compliance matrix and an honest cost range — not a marketing page.
SOX Compliance Consulting
Comprehensive SOX compliance guide for enterprise ERP. Book an assessment with an internal-controls implementation specialist.
Audit Management Software Consulting
Practical guide to audit management software selection and implementation. Book an assessment with a SOX controls specialist.
Internal Audit Software Consulting
Expert guide to internal audit software for SOX-compliant organisations. Book an assessment with an implementation specialist.
IT Audit Software Consulting
Specialist guide to IT audit software for SOX IT general controls. Book an assessment with an implementation specialist.
TeamMate Audit Software Consulting
TeamMate audit software implementation and SOX configuration specialists. Book an assessment.
Internal Controls Software Consulting
Expert guidance on internal controls software for ICFR and SOX compliance. Book an assessment.
ERP-specific control guidance
Segregation of duties, approval workflows, and change-management evidence differ by platform. We publish platform-specific guidance because generic ERP-controls advice does not survive contact with a real system.
Sector-specific SOX constraints
Telecommunications revenue recognition, construction percentage-of-completion, nonprofit fund accounting boundaries — the SOX control set is the same, but the transactions it has to evidence are not.
Platform and migration decisions
Choosing between ERP platforms, or migrating from one to another, has SOX-specific consequences most comparison content ignores — control continuity during cutover, historical evidence retention, re-testing scope.
Book an assessment with a SOX ERP specialist
Tell us your platform, entity count, and where you are in the audit cycle. We'll come back with a scoping call, not a sales pitch.
Book an Assessment →