Oracle Access Controls

Technology Assurance and Advisory Oracle Access Controls Key to aligning your Oracle environment Oracle Internal Controls Manager – “Deloitte has a four- with your Governance, Risk and Compliance provides an automated segregation of (GRC) needs is sustaining robust duties analysis tool that identifies conflicts stage plan for authorisation controls by maintaining a and reports on violations with real-time drill strong access control strategy and practice. down capability to the root cause of the implementing It is an area that has historically proved conflict. Where mitigating controls exist, or difficult to manage, monitor and sustain. conflicts cannot be avoided for particular Oracle access and Oracle’s access and authorisation control users or groups of users, these can be tools provide a robust, proven access excluded, enabling auditors to concentrate authorisation management and monitoring solution and on unexpected exceptions and improving are a core component of Oracle’s GRC the relevance of items on reports. control products vision. Combining User Management with Internal Controls Manager enhances controls as which integrates Deloitte can help you re-evaluate key requests for privileges that conflict with segregation of duties requirements in the segregation of duties requirements are into the Oracle GRC context of your current business processes rejected. and user roles, in addition to helping you roadmap.” align and sustain access control within your Oracle Identity & Access Management business systems. We do this utilising Suite – enables user provisioning across all Oracle’s access and authorisation control applications from ‘hire to retire’ through a technology which is both cost effective in web-based automated approval process. execution and provides enhanced visibility The approval workflow will also allow real- of control effectiveness for management time risk assessments by the role or business and auditors. owner prior to any decisions being made. Additionally, access privileges can be easily Oracle E-Business Suite uses three modules re-certified periodically and removed if no that address key operational issues: longer required. User Management – provides role-based Benefits of Oracle Access Controls access control for Oracle, easing Applications administration and enabling users to have Using Oracle access controls applications access permissions that align directly to will allow your business to: their position in the organisation. • Provide global visibility and control over Information owners are able to authorise who has access to what activities across access to the Oracle system, with user your business applications accounts automatically created if the requester is new. Users can also reset their • Report on critical access violations in a own passwords when forgotten, freeing up consistent manner measured against best valuable system administrator time to practice metrics concentrate on more complex issues that • Establish a consistent process for occur. managing access that keeps your system ‘clean’ and your business and IT department talking . . . Audit Tax Consulting Corporate Finance . Oracle Access Controls Deloitte Services Deloitte has always been a leader in Governance, Risk and Compliance. Selecting a strategic partner who has a deep understanding of the issues is essential. Deloitte can help create a Governance, Risk and Compliance vision that is sustainable through: • A long term GRC roadmap. While access controls applications are vital we recognise that they are only a component of a GRC programme. We have our eye • Gain confidence that your systems will Achieving a compliant status firmly on the end goal. meet your audit and compliance • Benchmark and analyse standard rule set requirements • A robust methodology. There is a real • Eliminate role level conflicts difference between installation and • Enhance best practice security implementation. Deloitte has a detailed management to support future regulatory • Resolve user level conflicts methodology for the implementation of requirements • Ensure compliance requirements are met access controls applications for Oracle. • Achieve compliance at a lower cost • Transfer ownership of access controls to through automation of access and • Deep technical skills. Deloitte has one business process owners segregation of duties controls, centralised of the largest Oracle practices in the UK testing and excluding permitted • Refine the software configuration for and in the world. We have a long track exceptions to policy accurate reporting and optimal record of Oracle implementation, controls performance assurance and risk consulting. • Reduce cost of helpdesk and system administration Dealing with exceptions, privileged • Working in partnership with Oracle.