Our client is a national manager of distinctive, independent assisted living and memory care communities throughout the U.S., established less than two years ago and which has grown to manage more than 100 retirement communities caring for more than 5,500 residents across 28 states. 

To accommodate the company’s rapid growth, the organization implemented Dynamics 365 for Finance and Operations (D365FO) on an accelerated timeline to rapidly establish a business management platform. However, this forced the team to rely only on the standard security roles delivered with the application ‘out of the box’ which inherently contained critical and high-risk Separation of Duties (SoD) Conflicts. 

This was not going to work for much longer. Due to the amount of revenue under management for a large public real estate investment trust (REIT), they soon needed to comply with Sarbanes-Oxley (SOX) and external audit requirements, including controls over security access in D365FO. They needed to quickly find a solution that would integrate well within their D365FO environment and provide detailed audit reporting, SoD visibility, and scalable task-based roles for future growth. 

The customer acquired Fastpath and asked for implementation partners that could support them and solve their problem within the timeframe allotted. They reached out to Protiviti, a global consulting and internal audit firm, to assist with the Fastpath implementation, the security redesign build process, and establishment of governance processes to protect their new security architecture. 

The customer’s management team understood how critical it was to have the software and the governance processes in place, in order to effectively accomplish their objectives and sustain their security model going forward. Additionally, they wanted a team with the right experience executing these types of projects to help deliver within their expedited project timeline.  

In order to deliver the project requirements, Protiviti recommended which Fastpath products needed to be implemented to support the immediate project objectives. Fastpath has been Protiviti’s GRC, audit, and compliance tool of choice for the Microsoft Dynamics suite of products because of their leadership in the space and experience with the Microsoft ERP solutions.  

To start building a compliant D365FO security architecture, a SoD risk framework had to be established and configured within the Fastpath software. The framework provided the rules for how the new roles can be built. Once the ruleset was configured within Fastpath, the team used the solution to help build security roles that aligned and complied with the SoD framework, designed processes for managing their new risk framework, and implemented the new roles throughout the organization.  

By relying on Fastpath, Protiviti streamlined the iterative build, test, analyze, and modify processes. This made it easier to quickly build scalable task-based roles that were free of SoD conflicts, and still provided a flexible security framework enabling the customer to grow and change over time.