Case study Energy & utilities

Automate segregation of duties in Oracle EBS

An international nuclear services company needed segregation-of-duties rules established for key business processes, and roles set up correctly to minimise violations before go-live.

IndustryEnergy & utilities

RegionHeadquartered in Salt Lake City, Utah, with operations across the United States and worldwide

SizeOver 1,500 employees; world leader in the safe recycling, processing and disposal of nuclear material

Primary ERPOracle E-Business Suite

Challenges

Automate application controls for Oracle E-Business Suite to remediate control deficiencies
Establish segregation-of-duties rules for key business processes
Ensure roles and responsibilities are set up correctly to minimise segregation-of-duties violations at go-live
Automate segregation-of-duties violation analysis using GRC controls
Automate configuration controls for Oracle E-Business Suite
Implement GRC management, transaction controls and preventive controls

Results

Mapped access control risks into E-Business function-level controls
Detected all control violations within and across E-Business modules
Identified and eliminated false-positive segregation-of-duties violations
Remediated segregation-of-duties violations through responsibility design and user assignment setup, with waivers and compensating controls for limited IT and Finance users based on business need
Implemented configuration control monitors for Oracle E-Business Suite configurable parameters

See it on your ERP

A 30-minute walkthrough against the systems you actually run.

See how this model applies to the systems sitting inside your own estate.

Book a demo More case studies

What this story shows

SoD violations are detected within and across E-Business modules
False-positive violations are eliminated rather than investigated repeatedly
Roles are corrected before go-live, with waivers and compensating controls where the business needs them