Review sales and revenue controls — approved price and discount authority, controlled overrides and promotions, order-to-invoice matching, period-end cut-off, and analytics on discounts, credit notes and revenue trends.
Build a practical risk and control matrix that links each business objective and risk to its control, owner, frequency and evidence, then records the planned test and conclusion.