Information Technology Internal Control Items For The Post- Implementation Phase Of Enterprise Resource Planning Systems

Our understanding of relevant internal controls at the post-implementation phase remains limited in spite of general guidance from professional frameworks or standards. In this study, based on the COBIT 5 framework, we reviewed 56 studies from relevant academic journals from 1998 to 2014 to form an initial list of information technology (IT) internal control items for the post-implementation phase of enterprise resource planning (ERP) systems. An expert survey was conducted to validate the list, and 45 control items were ranked using the Delphi method. The proposed items may assist companies and auditors in focusing on essential internal control issues during the ERP system post-implementation phase.