Challenges
- Segregation-of-duties risk in Oracle ERP Cloud
- Limitations of the out-of-the-box rules in Oracle ERP Cloud
- Segregation-of-duties remediation
- Transaction risk
Results
- Security controls: improved user security role design by running analysis against over 50 access rules in development instances before going live
- Configuration management: used Configuration Analytics to minimise issues caused by configuration differences across CRP1, CRP2, Dev, Test and Prod instances
- Transaction risk remediation: remediated 25 audit findings using Transaction Analytics
- Reduced the number of manual controls by 27%