Management Capabilities
has the highest business privileged access - create master items, employees, customers and suppliers
All create, read and update must be monitored for key control design effectiveness
Any new user request must be approved through the sox key control application process
24/7 monitoring and alerts on any deviations
user group must restrict users from transaction capability user group
has a security classification type = highly restricted with segregation of duties