This paper will attempt to help you as functional users gain some perspective on the complexity and makeup of your company’s ERP system and in the process help you to provide a better control environment in response to SOX. I will also address tools in the application that help you monitor some of the controls that you put in place and address some best practices for allowing changes to your software.