Our Services
Segregation of Duties and Access Analysis
Our risk-based approach to Segregation of Duties analysis takes into account system configuration, risk scenarios specific to Oracle functionality, business processes outside of Oracle, and clients' customizations to address common issues and suggest ways on remediating them. Most of the segregation of duties analysis and remediation projects take two to four weeks.
Usually periodic reviews of access to critical high-risk functionality are also necessary as part of the clients' risk-based control framework. Access review may be performed along with our segregation of duties analysis. We bring our in-depth knowledge of Oracle Applications technology and functionality to review user access and identify different non-intuitive ways in which users may gain access to key functions in Oracle.
The Segregation of Duties and Access Analysis services are delivered through the use of our software that may be run by us offline or may subsequently be installed and run on demand by the clients on their own.
Security Design for Oracle Implementations
Oracle Applications implementations usually stretch company resources to the limit and oftentimes leave user access and Oracle Applications responsibility design underserved until "Phase II". We assist clients in designing user and responsibility access by balancing business requirements with common risk scenarios. Our software tools allow us to validate access to high risk functionality to avoid "surprises" down the road (i.e. Fixed Assets responsibility appears to allow access to vendor master....)
Internal Controls Design for Oracle Applications
We bring our intimate knowledge of Oracle Applications functionality coupled with experience on external audit side to identify business cycle controls to adequately mitigate common risks and allow for more efficient testing. With our focus on business cycle control automation in Oracle come the usual benefits of business process consistency and operational efficiency.