The standard configuration of users and security within Epic may allow inappropriate access to functionality or contain segregation of duties conflicts if not comprehensively reviewed with a risk lens at the time of implementation. The Internal Audit function can benefit from tools both existing within and outside of Epic to audit smarter, not only enabling broader risk coverage and ongoing monitoring of those risks but actually providing valuable insights and/or tools to the business itself. These insights can reduce risks, such as fraud, waste and abuse, unauthorized disclosure of patient and financial information, and inappropriate administrative security.