Skip to content

Case study Education

How leading university was able to monitor unauthorised changes to critical configurations

One of the world's leading teaching and research institutions reviewed Oracle E-Business Suite access violations by hand, with no way to detect changes to key application setup controls or master data in time.

IndustryEducation
RegionCalifornia, United States
Size2,000+ faculty members
Primary ERPOracle E-Business Suite R12

Challenges

  • A manual process to review access control violations in R12 prolonged remediation of violated access policies
  • No way to review access controls for the third-party cash receipts application used by departments across the university
  • No method to detect or track changes to key application setup controls and master data in a timely way
  • No way to systematically monitor transaction data for funds and grant programmes to ensure compliance with federal regulations and donor requests

Results

  • Proactively monitored the Oracle E-Business Suite R12 environment for access policy violations, preventing errors, misuse, abuse and fraud
  • Significantly reduced the time and resource needed to detect and remediate access policy violations
  • Reduced time and resource for testing during periodic reviews
  • Proactively detected and mitigated issues with cash entry and authorisation across departments
  • Monitored unauthorised changes to critical configurations and operational data, and managed configurations through upgrade, implementation and ongoing maintenance
  • Mitigated exposure to error, misuse and fraud from out-of-policy business transactions
  • Ensured ongoing compliance with donor and federal government fund and grant accounts

See it on your ERP

A 30-minute walkthrough against the systems you actually run.

See how this model applies to the systems sitting inside your own estate.

What this story shows

  • Access policy violations are detected continuously rather than at periodic review
  • Changes to critical configurations and master data are tracked as they happen
  • Fund and grant transactions are monitored against donor and federal requirements