I'm surprised there is no job/role matrix in place as that must make it difficult to have a good overview the access across the organisation - getting something like this in place would be pretty high priority for me personally. A couple of years ago one of my clients had a very high staff turnover & among other things wanted their security processes improved. Probably the biggest benefit was to create an org structure to allow position based role allocation. Part of the new joiner/mover process was to map the user to the position. Once the structure was right it really helped speed up the process. Weeden And Zygmund Pdf.

That's why I wanna share that those two approaches are very contradictive. And I agree with Henrik. If the company does not have good tracking of who is in what position, it is definitely lack of control. Thus, the financial audit team cannot rely on this control and they have to use different audit procedures to achieve their objectives.=20 I'm not sure whether this company will change the naming convention into the proper one since they still find it very difficult to be applied due to high employee turnover and they also have not had job role matrix.