| Ability to update tolerances such as over receipt control, allow unordered receipts, etc. Risks vary based on the setting(s) changed. Some of the settings are integral to key controls (for SOX purposes), critical for fraud prevention, and critical for operational purposes. The impact of any changes should be reviewed by someone with internal control design as part of their job role or a committee that reviews such changes. |