Continuous Monitoring Platform (CMP) is a cloud platform that offers organisations ongoing visibility into their processes, data, and controls. By continuously monitoring business applications and underlying data sources, both on-premises and in the cloud, CMP automatically flags anomalies. This shifts manual sampling to automated testing of entire populations. Findings can be immediately addressed through structured workflows, with robust AI support.
Thanks to an extensive library of more than 250 pre-configured monitors, organizations can quickly realize value with a short implementation timeframe. CMP unites business and audit in one platform, fostering efficient, transparent, and future-ready control.
With monitoring such as:
Reducing the risk of unauthorised payments requires ongoing testing of authorisations and critical changes. CMP monitors authorisations within the payment process and flags unjustified changes to account numbers that could lead to fraudulent or unwanted payments. Anomalies are made visible immediately, including involved users and missing checks. Follow-up and documentation within CMP create demonstrable control and consistent substantiation for internal audit and external accountants.
CMP monitors salary changes and flags modifications not processed through an established workflow or without the four-eyes principle. Consider salary adjustments processed directly without independent review. By continuously monitoring these changes, organisations gain timely insight into potential control issues. Follow-up and assessment are documented within CMP, creating transparency for management and auditors.
CMP automatically detects duplicate invoices based on relevant characteristics such as supplier, amount, invoice number, and date. This flags potential duplicate payments early, before payment occurs. Findings are presented clearly and can be investigated and resolved immediately. This helps organisations prevent financial errors and contributes to a reliable and efficient accounts payable administration.
CMP continuously monitors which users have 'superuser' rights or other elevated authorisations in systems. The platform flags unauthorised assignments and changes of rights, and activities associated with these critical accounts. This provides immediate insight into risks of misuse or other unwanted changes. Organisations can follow up and document findings, while auditors can use the same monitoring information within their audit.
These examples show just a fraction of what CMP can monitor. The platform is system-independent and can be configured for various risks within finance, HR, IT, and business processes. Consider monitoring journal entries, payroll, VAT discrepancies, user rights, terminations, or system configurations. CMP supports both standard controls and organisation-specific monitoring, tailored to the risk profile and audit. This creates continuous insight into what truly matters—throughout the year.
CMP is developed by us with compliance as a guiding principle. The platform supports organisations in documenting, following up, and substantiating control measures, with all actions, findings, and follow-up steps traceably logged. Auditors use the same information within their audit, ensuring transparent collaboration between organisation and audit.
CMP also holds an ISAE 3402 Type II statement, meaning an independent auditor has confirmed that the relevant control measures are not only adequately set up but have also demonstrably worked over an extended period. This makes CMP a reliable link in the financial control landscape.
Through smart connectors, CMP can connect with all your systems, both cloud and on-premises.
CMP offers comprehensive monitoring for SAP environments, including SAP ECC and S/4HANA. Consider checks around user rights and critical authorisations, as well as process-oriented monitoring within purchase to pay (P2P) and order to cash (O2C). Anomalies are continuously flagged and followed up, making risks visible in time and control demonstrable.
CMP supports monitoring on Windows Active Directory to maintain control over identities and systems. Consider checks on user rights, terminations, password settings, and old operating systems. Continuous monitoring gives organisations better insight into who has access to critical systems.
For Oracle environments, CMP offers monitoring at both database and application levels. The focus is on critical transactions, changes in master data, and user rights and roles. By analysing complete datasets, CMP flags risks that may remain invisible with sampling. This supports both daily control and solid accountability to internal audit and external accountants.
For AFAS environments, CMP monitors HR, payroll, and financial processes, among others. Examples include salary changes, master data changes, segregation of duties, and discrepancies in payments or invoices. By using available data and connections, the monitoring aligns well with daily processes. This provides organisations and auditors with continuous insight into critical risks.
Due to its flexible setup, CMP is not limited to a handful of applications. We monitor Sharepoint, Microsoft Dynamics, Microsoft Entra ID, and Osiris, among others. CMP can monitor virtually any system where data is locally available or accessible via an API. The platform is widely deployable and easily expandable to new applications and risks.
CMP has an extensive library with over 250 pre-configured monitors, where AI can advise on suitable monitors. This allows many controls to be implemented quickly, and the implementation lead time is short.