Finding · F-ITGC-03

Purchase order released by requester above delegation threshold

OpenP2P-01 · Purchase orders follow approval thresholds; no self-approvalProcure-to-PayQ3 2026 Unified Program Review
Fraud indicator
Rating
No
High
Medium
Low

Requirement to validation

Observation
Raised 2026-10-06 in the ITGC Q3 FY2026-27 Controls Testing (Meridian Internal Audit). PO 4500018734 (INR 12.4 lakh, vendor 'Apex Office Interiors') was created and released by the same user (procurement executive with temporary FC-level release authority granted for quarter-end). Value is above the INR 5 lakh department-head band and should have required the Financial Controller.
Applications: SAP S/4HANA.
Potential risk
Unauthorised or erroneous transactions could go undetected and expose Meridian to financial loss and regulatory action.
Root cause
Temporary quarter-end release authority was granted without the release-strategy check on requester = approver.
Agreed action plan

Temporary release authority revoked; release strategy updated to block ERNAM = approver; PO retrospectively approved by Financial Controller. Tracked as T-003, T-004 in Prismet Tasks.

Management response: Temporary release authority revoked; release strategy updated to block ERNAM = approver; PO retrospectively approved by Financial Controller.

Owner (FPR)
Priya Sharma
Target date
20 Oct 2026
Priority
High
Status
In Progress

Evidence for this control (3)

Open list →
EvidenceTitleControlSource systemCollectedStatus
ITGC-REQ-017SAP S/4HANA: No self-approved purchase ordersP2P-01SAP S/4HANA9 Oct 2026Accepted
ITGC-REQ-018SAP S/4HANA: Release strategy matches thresholdP2P-01SAP S/4HANA8 Oct 2026Accepted
Q2-EV-014SAP S/4HANA · ticket sample (Q2)P2P-01SAP S/4HANA25 Jun 2026Rejected

Tests of this control (2)

Open list →
TestControlCycleTestedByResultConfidence
TST-ITGC-P2P-01P2P-01 · Purchase orders follow approval thresholds; no self-approvalQ3 2026 Unified Program Review6 Oct 2026Vikram Mehta, Farah Khan · Meridian Internal AuditFailMedium
TST-Q2-P2P-01P2P-01 · Purchase orders follow approval thresholds; no self-approvalQ2 2026 Unified Program Review18 Jun 2026Farah Khan, Vikram Mehta · Meridian Internal AuditFailHigh