Organizations should not wait for an embarrassing and http://alturl.com/g9u7u potentially devastating event to find out that security controls in their ERP systems are inadequate. To overcome this risk organizations need to implement an appropriate access strategy.