Despite the significant organizational risk associated
with change management that often results from an
ERP implementation, involvement of the internal
auditors in ERP implementation was not as heavy as
we had expected; only in one third of the cases,
internal auditors were proactively involved in change
management. Despite their lack of involvement in the
implementation process, majority of respondents felt
that their firms followed structured processes for
change management associated with the ERP
implementation.
We were surprised to find that internal auditors were
not as actively involved in defining and
implementing internal controls as new modules
implemented and existing modules are enhanced or
maintained. Only a quarter of respondent were
heavily involved in building internal controls and
only one-fifth of the respondents were involved in
business process reengineering efforts. These issues
perhaps reflect a broad perception that ERP
implementation are often led and managed by
information systems groups and not treated as
enterprise wide efforts.