Who this service is for
- Finance teams preparing for audit readiness
- Companies adding entities or controls
- Teams concerned about roles, approvals, and system access
Service
Internal Controls and Compliance
Improve ERP controls without slowing the business down.
Problems addressed
- Weak approval workflows
- Roles are too broad
- Segregation of duties is unclear
- Manual evidence is hard to collect
- Changes are not governed
Warning signs
- Users have access they do not need
- Approvals happen outside the ERP
- Audit evidence takes too long to compile
Questions Maitero answers
- Which controls should live in the ERP?
- Where are role conflicts?
- How should approvals and evidence work?
- What should be documented?
Scope and methodology
What Maitero performs during the engagement.
Scope of work
The main workstreams in this engagement.
- Control walkthrough
- Role and permission review
- Approval workflow review
- Reporting control review
- Change governance
Activities performed
Practical activities used to create evidence and decisions.
- Role matrix review
- Approval design review
- Evidence mapping
- Control gap workshop
- Remediation plan
Systems reviewed
Systems and process artifacts commonly reviewed.
- ERP
- identity systems
- approval tools
- reporting tools
- integration middleware
Documents required
Typical inputs requested from the client team.
- Role list
- permission matrix
- approval workflows
- audit requests
- change logs
Stakeholders involved
People usually needed for the work.
- Controller
- finance
- IT
- internal audit
- ERP administrator
- process owners
Maitero responsibilities
Structure the work, identify risks, document findings, facilitate decisions, and produce usable deliverables.
- Facilitate workshops
- Review artifacts
- Maintain issue and decision clarity
- Prepare executive readouts
Deliverables and outcomes
What the client receives.
Deliverables
Tangible outputs from the engagement.
- Control gap summary
- Role remediation plan
- Approval workflow recommendations
- Audit evidence map
- Governance checklist
Sample deliverable
A role and control matrix showing sensitive access, conflicting duties, approval gaps, report owners, and remediation priority.
View sample deliverablesExpected outcomes
The business results this work is designed to support.
- Stronger controls
- Cleaner audit evidence
- Reduced access risk
- Better governance
Risks addressed
Common risks this service reduces.
- Over-permissioned users
- Unsupported manual controls
- Uncontrolled system changes
What is not included
Clear boundaries keep the scope useful and controlled.
- Audit opinion
- Legal compliance certification
Optional services
Common next scopes that pair with this work.
- ERP assessment
- NetSuite roles and permissions review
- Release management support
Related pathways
Connect this service to the rest of the Maitero system.
Related processes
Business processes connected to this service.
- Record to Report
- Procure to Pay
- Order to Cash
Relevant platforms
Platforms and connected systems commonly reviewed.
- Oracle NetSuite
- Microsoft Dynamics 365
- Sage Intacct
- Acumatica
Relevant industries
Industry contexts where this service is commonly useful.
- Software and SaaS
- Financial Services
- Healthcare Services
- Nonprofit Organizations
Related resource
Use the Sample control deliverables to prepare for this work.
Sample control deliverablesFAQs
Common questions about Internal Controls and Compliance.
How does Maitero scope this service?
The first conversation clarifies project stage, systems involved, stakeholders, timing, and the deliverables needed for internal controls and compliance.
What does the client need to provide?
Maitero usually needs access to process owners, current reports, system documentation, issue lists, project artifacts, and relevant data or integration inventories.
Next step
Your ERP project does not need more uncertainty.
Tell Maitero where the project stands and receive guidance on the most practical next step.