Skip to main content

Internal Audit of WINGS Upgrade - October 2021

As part of its annual work plan, the Office of Internal Audit conducted an audit of the WFP Information Network and Global Systems (WINGS) upgrade. WINGS seamlessly integrates several elements within WFP’s enterprise resource planning system (based on SAP software) to manage the organisation’s critical business functions, including procurement, supply chain, finance, travel and human resources. The upgrade to WINGS was prompted by the announcement of the end of technical support by the vendor of WFP’s SAP running version, and the associated need to move from an Oracle to a HANA database. The types of changes associated with a major upgrade such as this bring about significant risks of operational disruptions, compromised integrity of the migrated data, and/or gaps in IT security, automated and access controls. The audit concentrated on the following control areas, plus their associated risks and related mitigations:(i)project management and governance; (ii) training and awareness; (iii) integration and impact analysis, data conversion and data quality; (iv) access management; and (v) change management. Based on the results of the audit, the Office of Internal Audit has come to an overall conclusion of effective / satisfactory.