Oracle Solutions for Governance, Risk and Compliance

INFORMATION ENABLES Oracle Solutions for Governance, Risk, and Compliance Now more than ever, enterprises must achieve strategic objectives while operating within prescribed boundaries. Oracle makes this possible with the most complete platform for governance, risk, and compliance. “We’ve reduced the amount In the aftermath of well-publicized failures of processes, and best-in-class controls enforce- of time it takes to complete corporate control, governments and indepen- ment and data security, so you can routine audits from two dent standards bodies are imposing stringent • Leverage a centralized repository of months to two days [with governance, risk, and compliance (GRC) GRC information. Built on the industry’s Oracle Governance, Risk, and requirements that cover financial reporting, leading content management solution, only Compliance Controls Suite]. ” data security, records retention, risk manage- Oracle unifies disparate silos of GRC data ment, and more. across multiple mandates, frameworks, Darlene Mac Cormac No one expects that this is the end of new systems, and lines of business to deliver VP of Procurement and Strategic Sourcing industry and legislative requirements, so insight into risk-adjusted performance. Harris Bank business executives continue to struggle • Manage GRC processes across the enter- with questions such as: How can we stay on prise. Mitigate risk across areas such top of regulatory demands while controlling as financial assurance, workforce training, “Using Oracle Governance, Risk, costs? Can we better manage risk to prevent and IT governance, and in industry-specific and Compliance Manager has business and compliance failures? How areas such as credit risk management, helped us focus on significant do we achieve better performance while anti-money laundering, and pharmaceutical risks and true key controls. ensuring accountability and integrity? quality assurance. This has improved our ability • Protect critical information assets at all A Comprehensive Platform for GRC to resolve compliance issues levels. Core security and privacy controls, in a timely fashion. ” To help executives meet these challenges, along with automated enforcement of proper Oracle delivers a comprehensive GRC user access and authorization policies, keep Danny Waxenberg platform that works across heterogeneous information safe across all IT resources— Assistant Vice President for environments. Oracle combines risk intel- Internal Controls applications, middleware, and databases. ligence and analytics, end-to-end support for Unum cross-industry and industry-specific GRC Oracle Solutions for Governance, Risk, and Compliance Oracle Governance, Risk, and Compliance Manager has been positioned in the Leaders quadrant in Gartner’s 2008 Enterprise Governance, Risk and Compliance Platforms Magic Quadrant. (Gartner, Inc., Magic Quadrant for Enterprise Governance, Risk and Compliance Platforms, June 30, 2008.) Simplify GRC and Reduce Costs • Automate segregation of duties (SOD) a reporting and intelligence system for enforcement across enterprise applications, effective risk oversight. To keep costs down, you need a compre- custom solutions, and database systems. hensive, integrated approach to governance, • Highlight key risk and performance indica- Edge-to-core coverage of access controls risk, and compliance. The Oracle GRC tors via executive-level dashboards that can prevents SOD conflicts from arising and platform provides a common foundation for drill down to detailed evidence in source applies least-privilege principles to protect managing risk and compliance documenta- systems. Hundreds of predelivered reports sensitive information. tion, assessment, analysis, and certification, enable organizations to analyze and mitigate so organizations can reduce costs without • Ensure compliant user provisioning across risk in a holistic yet simple manner. compromising compliance. With Oracle’s all systems with integrated identity and • Determine root causes and accountability GRC platform, you can application controls management. The cen- for risk by tracking loss incidents and own- tral provisioning of user access, combined • Streamline compliance efforts by managing ership. Business process automation provides with fine-grained authorization policies, multiple regulatory requirements with one real-time event escalation and streamlined deters fraudulent conduct. system. Compliance activities are baselined remediation of issues. against documented policies and best- • Enforce best-practice setups and reduce practice control frameworks such as COBIT configuration drift. Systems are auto- True Cross-Enterprise Support and COSO. matically monitored to ensure that critical Recognizing that GRC requirements must setups follow standard policy and change address a broad range of accountabilities, • Replace labor-intensive and error-prone management procedures. Oracle delivers a standards-based, service- manual tasks with automated GRC process management and controls monitoring. oriented GRC platform that works across Transform Uncertainty into Opportunity Best-practice control libraries get organiza- diverse applications and system environments. tions up and running quickly.