As part of its annual work plan, the Office of Internal
Audit conducted an audit of the WFP Information Network
and Global Systems (WINGS) upgrade. WINGS seamlessly
integrates several elements within WFP’s enterprise
resource planning system (based on SAP software) to manage
the organisation’s critical business functions, including
procurement, supply chain, finance, travel and human
resources. The upgrade to WINGS was prompted by the
announcement of the end of technical support by the vendor
of WFP’s SAP running version, and the associated need to
move from an Oracle to a HANA database. The types of
changes associated with a major upgrade such as this bring
about significant risks of operational disruptions,
compromised integrity of the migrated data, and/or gaps in
IT security, automated and access controls. The audit
concentrated on the following control areas, plus their
associated risks and related mitigations:(i)project
management and governance; (ii) training and awareness;
(iii) integration and impact analysis, data conversion and
data quality; (iv) access management; and (v) change
management. Based on the results of the audit, the Office
of Internal Audit has come to an overall conclusion of
effective / satisfactory.