Security and Control Environment Testing of D365 and Interfaces

The Department of Health and Social Care is implementing Microsoft D365 as its new ERP system which will process £140bn of payments, including payroll and supplier payments. It is business critical that this system has appropriate controls built into to minimise any loss through fraud or error and appropriate segregation of duties to ensure sound management of the Department's finances and information to be held within the system.

This procurement is to engage an expert to undertake the testing of the D365 system as configured for DHSC to demonstrate the effectiveness of the interoperability of the security roles, user groups, hierarchies, workflow, policies, authorisation limits and audit logging functionality to provide a sound control environment and appropriate segregation of duties for the Department.