Hi,
We are currently in the middle of doing a security audit.
We've looked at Fastpath, but the issue there is that we will pay them and we will also will need to give them our time to work this out;
So, we would like to see if there is a list somewhere that can guide us instead, or where to get it so we can go thru the audit ourselves.
A list specifying some accounting controls like a user who creates a vendor cannot be the one issuing checks against them, or something like that.
I appreciate any insights or help you can provide.
Thanks!
