Friday, June 30, 2023

Comprehensive Checklist for Information System Auditor using audit tools for checking ERP Migration and E-mail Migration

 Part 1: ERP Migration

Review Project Quality Plan or Method Document

Carefully examine the project quality plan or method document to understand the overall approach to ERP migration.

Migration Plan Analysis

Verify that the migration plan includes a detailed analysis of project phases, milestones, and dependencies.

Ensure that responsibilities for each migrational activity are clearly defined.

Identification of Critical Business Processes

Verify that critical business processes have been identified and understand the criteria used for their selection.

Consideration of Business Process Aspects

Identify high-volume business processes.

Determine major revenue-generating processes.

Identify processes with the greatest impact on customer satisfaction.

Identify areas generating high profits.

Conference Room Pilot Validation

Examine the conference room pilot to validate the design, configuration, and customization activities in a controlled environment.

Risk Assessment Exercise

Ensure that a proper risk assessment exercise has been conducted by the management.

Regular Review Meetings for Risk Management

Verify that regular review meetings with managers and stakeholders have been conducted to manage and mitigate migration-related risks.

Completeness of Configuration Evaluation

Evaluate the completeness of the configuration by measuring the modules configured in each business area.

Migration Plan for ERP Data

Examine the migration plan to ensure that all data relating to the ERP system is included and accounted for in the migration process.

Data Migration Strategy

Verify whether management has followed proper steps while developing a data migration strategy, including identifying the data to be migrated, determining the timing of data migration, generating data templates, freezing migration tools, deciding on migration-related setups, and data archiving.

Backup and Contingency Plan

Verify whether an effective backup plan or contingency plan has been developed to mitigate the risk of migration failure.

Monitoring and Review of Contingency Plan

Ensure that the contingency plan has been constantly monitored and reviewed to maintain its effectiveness.

User Acceptance Testing

Verify whether user acceptance testing has been carried out to ensure that the new system meets the business requirements.

Review of User Acceptance Testing Results

Review the results of user acceptance testing to ensure that the business requirements have been properly configured in the new ERP system.

Incorporation of Delegation of Authority (DOA)

Verify whether the organization's Delegation of Authority (DOA) has been properly incorporated into the new system.

Comparison of General Ledger (GL) Data

Compare the data in the General Ledger (GL) from the migrated ERP application with the data available in the old GL.

Control Accounts Verification

Examine the control accounts in each module and verify whether they tally with the control account balances in the GL.

Examination of Cut-off Documents

Examine the cut-off documents in the old system and the new ERP environment to ensure accuracy during the migration process.

Part 2: E-mail Migration

Preparation of E-mail Data Backup

Examine whether a backup of e-mail data has been prepared before the migration.

Quality Assessment of Selected Software

Evaluate the quality of the software selected for the e-mail migration process.

Consideration of Factors in Software Selection

Examine whether the management has considered various factors while selecting an e-mail migration tool, such as client-side usability, installation requirements, pre-configuration capabilities, and file location detection.

Verification of E-mail Migration Process

Verify that the e-mail migration process meets specific requirements, including successful migration of folders and their contents, accurate transfer of messages, preservation of message subjects and dates, proper identification of unread messages, successful transfer of attachments, and correct placement of items from the old "Sent" folder to the new one.

Stress Testing for E-mail Migration

Check if stress testing has been conducted during the e-mail migration process to ensure the system's performance under high loads.

Contact Conversion Checks

Verify the successful conversion of contacts, including address books, individual contacts' accessibility, proper placement in the new system, accurate migration of relevant contact fields, ability to use names from the address book in new emails, migration of secondary email addresses, and conversion of distribution lists or groups.

Pilot Email Migration and Feedback

Verify whether a pilot email migration has been conducted and feedback has been obtained to evaluate the success and effectiveness of the migration process.

Note: The IS auditor should mark "Yes" if the requirement is met, "No" if it is not met, or "NA" if the requirement is not applicable.