For the Governance, Risk and Compliance nerds in the house (that would be anyone who works a Fastpath): How to use COSO to assess IT controls.
How to use COSO to assess IT controls
Archived post from 2014. Dynamics GP and the links it points to have changed since; check current documentation before relying on version-specific steps.