SOX 404 control in AX 2012 R3

  • SOX 404 control in AX 2012 R3

    Posted by nazimlalji@hotmail.com on June 11, 2019 at 1:40 pm
    • Najeem JanatAli

      Member

      June 11, 2019 at 1:40 PM

      Hi All

      PleaseĀ  can some advise the path how to generate an application change log in AX 2012,Ā 

      Thanks and kind regards

    • Alex Meyer

      Member

      June 12, 2019 at 9:15 AM

      Nazim,

      Are you looking to track changes made in the database or in the application code or both?

      Also because you listed SOX 404 in our title, are their other audit requirements you are trying to meet?

      ——————————
      Alex Meyer
      Director of Dynamics AX/365 for Finance & Operations Development
      Fastpath
      Des Moines, IA
      ——————————
      ——————————————-

    • Najeem JanatAli

      Member

      June 12, 2019 at 9:41 AM

      Thanks Alex

      Current requirement is changes made in both database and application, please can you advise the path in AX 2012 R3 or what which area in AOT to pull this report

      Also if you can specify what are the other requirement falls under SOX 404

      Thanks and kind regards——————————————-

    • Alex Meyer

      Member

      June 12, 2019 at 10:01 AM

      Nazim,

      Database changes will have to be done either by the database log or by an external tracking software. I will advise that the database log within Dynamics AX was never meant as an audit tool, it was built as a debugging tool. You will see a performance decrease if you enable this feature for any number of tables. There are also very few native reports and data management capabilities built into the tool itself.

      But also keep in mind that you will not be able to track every change that is occuring in the database, you want to take a ‘risk based approach’ to what you are tracking and making sure that there is an audit requirement for tracking that change. By doing this you help improve system performance and minimize the amount of data you need to track and report on.

      X++ code changes should be handled by your source control setup, here are some Microsoft docs on the subject:
      https://docs.microsoft.com/en-us/dynamicsax-2012/developer/version-control-system
      https://docs.microsoft.com/en-us/dynamicsax-2012/developer/version-control-operations-in-microsoft-dynamics-ax
      Once you have source control set up you can report on the changes made to code much easier.

      As far as other audit requirements go, you may also be needing Segregation of Duty reports I’ve actually written a white paper about the gaps in Microsoft’s SOD platform that auditors will ask about. It can be found here:Ā Fastpath vs. Dynamics AX/D365FO Segregation of Duty Analysis Comparison

      If you have further questions feel free to reach out, I would be happy to answer them.

      ——————————
      Alex Meyer
      Director of Dynamics AX/365 for Finance & Operations Development
      Fastpath
      Des Moines, IA
      ——————————
      ——————————————-

    • Lori Hodsoll

      Member

      June 13, 2019 at 11:38 AM

      Hi Nazim,

      I used FastPath at my last company.Ā  It offers a lot, especially if you put in the effort to configure it to get what you’re really looking for.Ā  Feel free to reach out if you want the customer perspective.

      ——————————
      Lori Hodsoll
      Supernus Pharmaceuticals
      Rockville, MD
      ——————————
      ——————————————-

    nazimlalji@hotmail.com replied 6 years, 3 months ago 1 Member · 0 Replies
  • 0 Replies

Sorry, there were no replies found.

The discussion ‘SOX 404 control in AX 2012 R3’ is closed to new replies.

Start of Discussion
0 of 0 replies June 2018
Now

Welcome to our new site!

Here you will find a wealth of information created for peopleĀ  that are on a mission to redefine business models with cloud techinologies, AI, automation, low code / no code applications, data, security & more to compete in the Acceleration Economy!