Control Intelligence

AI Analysis Results

Customer Master & Credit — Order-to-Cash (AR & Revenue)

Back to Sub-Process
66
/ 100
Adequate
Overall Sub-Process Rating
Adequate — Control exists and operates; minor enhancements possible.
1 control evaluated4 strengths identified2 gaps identified
Executive Summary

The Customer Master & Credit process demonstrates adequate controls overall, with most key controls designed and operating as intended. Certain areas require enhanced documentation or monitoring to close identified gaps, but no material weaknesses were noted during the assessment period.

Strengths
  • Customer credit limits are approved based on a... is consistently executed
  • Exception reporting is generated and reviewed timely
  • Segregation of duties is enforced across critical functions
  • Key controls are documented in a centralized repository
Gaps
  • Access recertification cadence does not meet policy requirements
  • Monitoring controls are not formally documented or tested
Recommendations
  1. 1Automate exception detection and route alerts to control owners within 24 hours
  2. 2Strengthen documentation requirements to include evidence retention standards
  3. 3Implement a workflow tool that captures reviewer identity and timestamp for all approvals
Framework Mapping
COSO 2013
Principle P10Principle P7
SOX 404
ICFR.O2C.CR.01
IIA Standards 2024
IV.9.2

Control-Level Breakdown (1)

O2C-CR-01AdequateScore: 66/100
Customer credit limits are approved based on a documented credit policy.
Key Finding

The control is in place and generally operating as intended. Customer credit limits are approved based on a documented credit policy. Minor documentation or timeliness gaps were noted but do not represent material risk.

Recommendation

Enhance documentation and monitoring for: customer credit limits are approved based on a documented credit policy. Ensure review evidence includes timestamps and reviewer identity.

Framework Tags
COSO P7COSO P10ICFR.O2C.CR.01IIA IV.9.2