Does your organization maintain proper workflow history? - ERP Risk Advisors
post-template-default,single,single-post,postid-914,single-format-standard,ajax_fade,page_not_loaded,,qode_grid_1300,footer_responsive_adv,hide_top_bar_on_mobile_header,qode-child-theme-ver-1.0.0,qode-theme-ver-16.7,qode-theme-bridge,wpb-js-composer js-comp-ver-5.5.2,vc_responsive

Does your organization maintain proper workflow history?

Does your organization maintain proper workflow history?

Reviewing docs for a client today and ran across this comment in a document “I believe that there are audit reporting requirements to provide evidence of workflow approvals of changes to compensation or position-related edits”

Question: Does your company property maintain workflow history for approvals? Let me help with another question to ask your DBAs – how often are workflow history tables purged? Your homework for the day…

Based on my experience, many organizations do not have the evidence for such approvals if an auditor asks for this type of history.

I have enabled anonymous comments to protect the identity of those responding. Please respond anonymously with any comments.

Jeffrey T. Hare

Jeffrey Hare, CPA CIA CISA is the founder and CEO of ERP Risk Advisors. His extensive background includes public accounting (including Big 4 experience), industry, and Oracle Applications consulting experience. Jeffrey has been working in the Oracle Applications space since 1998 with implementation, upgrade, and support experience. Jeffrey is a Certified Public Accountant (CPA), a Certified Information Systems Auditor (CISA), and a Certified Internal Auditor (CIA).

  • Anonymous
    Posted at 19:47h, 15 November

    We only maintain 30 days worth of history. Not enough even to support month end in case of questions. As a developer, I don't feel this is adequate for support reasons.

  • Jeffrey T. Hare, CPA CISA CIA
    Posted at 19:49h, 15 November

    Anonymous – feel free to email me at I agree that 30 days isn't enough. The workflow approval history should be kept as long as your retention history calls for it to be stored – typically this type of data is kept for 12 – 15 months to support SOX audits.


Post A Comment