Oracle GRC Controls Suite Fundamentals Ver. 8.5/7.3.1/5.5.1

Transcription

1 Oracle University Contact Us: Oracle GRC Controls Suite Fundamentals Ver. 8.5/7.3.1/5.5.1 Duration: 4 Days What you will learn This course describes the four governors that comprise the GRC Controls Suite. This course gives students the opportunity to learn the principal techniques and best practices for the implementation and functionality of Oracle GRC Controls. You will learn how to use Application Access Controls Governor 8.5. Students will walk though an implementation process that includes configuration and planning of data sources, roles, users and notification schedules, the necessary setups for creating entitlements, policies and conditions and best practices around remediation of conflicts. You will also learn how to use the Transaction Controls to create control monitors to define actions subject to control. This course also describes how to use Preventive Controls to implement change-control rules within instances of Oracle E-Business Suite. You will also learn how to use Configuration Controls to monitor and control setup data, operational data, and key controls. In addition to presentations, this course also offers comprehensive hands on practices. These Practices enable you to apply your knowledge of GRC Control Suite by completing exercises that build upon one another. This course teaches Application Access Controls Governor (AACG) 8.5, Transaction Controls Governor (TCG) 8.5, Configuration Controls Governor (CCG) and Preventive Controls Governor (PCG) It is not applicable for customers implementing release 8.6 of AACG and TCG Learn To: Create and define policies Remediate user conflicts Gain an understanding of the components of the GRC Controls Demonstrate regulatory compliance and promote operational efficiency Utilize the Oracle Governance, Risk and Compliance Suite Use the GRC Controls reporting interface to view and track the reports available Audience Administrator Business Analysts End Users Sales Consultants Copyright 2013, Oracle. All rights reserved. Page 1

2 Support Engineer Related Training Required Prerequisites Familiarity with basic web application navigation and usage Know the fundamentals of governance, risk and compliance concepts Suggested Prerequisites Be familiar with Oracle Applications Familiarity of Oracle access security model Familiarity with your specific corporate governance concep Knowledge of Segregation of Duties concepts Course Objectives Understand the components of Oracle GRC Suite Describe the components that comprise Applications Access Controls Governor (AACG) Load and create policies, generate user conflicts, use reports, learn best practices for analyzing and remediating conflicts Describe the components that comprise Transaction Controls Governor (TCG) Create transaction controls templates and models Describe the components that comprise Preventive Controls Governor (PCG) Create process, audit, and change control rules Describe the components that comprise Configuration Controls Governor (CCG) Create snapshots, compare snapshots, track changes to snapshots Course Topics Introduction to the Oracle Governance, Risk and Compliance Controls Suite Oracle Governance, Risk and Compliance Controls Suite Overview Application Access Controls Governor Overview Overview of Setting Up AACG Implementation Considerations Copyright 2013, Oracle. All rights reserved. Page 2

3 Setting up Application Access Controls Governor Application Access Controls Governor Setup Flowchart Setup Checklist Application Access Controls Governor Setup Steps AACG Configuration Planning and Installation Defining Data Sources Defining Roles Defining Users Defining Notification Schedules ETL Synchronization AACG Policy Planning and Setup Defining Entitlements Defining Policies Defining Conditions AACG Reporting Using and Running Reports Accessing the Report Center Viewing Reports AACG Remediation Overview of Remediation Remediation Considerations Remediation Flowchart Remediation Checklist Application Access Control Governor Remediation Steps Using the Heat Map Using Work Queue Management Running Conflict Reports Transaction Controls Governor Overview TCG Application Overview GRCC 8.5 Platform Review and TCG Differentiators Using Business Objects TCG Setup Creating Filters and Using Business Objects Using Processes by Functional Area TCG Configuration Planning and Installation Configuration Planning Defining Datasources Defining Roles and Users Using ETL Synchronization Synchronizing Data Accessing Job History? Using Administration to set Data Administration, Application Configuration, and Business Object Administration Using the Manage Model Page Viewing Models Synchronizing Data Copyright 2013, Oracle. All rights reserved. Page 3

4 Viewing or Exporting Results Creating, Editing, Copying, or Deleting Models Exporting Models or Templates Importing Models or Templates TCG Create and Edit Models Using the Create Model Page Selecting Business Objects Using Custom Objects Selecting Datasources Selecting and Arranging Filters, Functions, and Patterns Creating a Filter, a Function, and a Pattern Defining Model Results Saving Models Preventive Controls Governor Overview Preventive Controls Governor Application Overview Identifying the Components of PCG PCG Form Rules Setting Security with the Event Tracker Creating Messages Default Value Rule List of Values Rule PCG Flow Rules Trigger-Based and Periodic Process Rules Constraint Process Flows Approval and Notification Process Flows Concurrent Request Process Flows SQL Process Flows Condition Process Flows PCG Audit Rules Creating Audit Groups Defining Audit Columns and Translation Data Reporting The Online Audit Form PCG Change Control Rules Approval Change Control Rules Creating Change Control Rules Manually Loading Change Control Rules Content Configuration Controls Governor Overview Describe the components that comprise Configuration Controls Governor CCG Setup Overview CCG Functionality Snapshots and Comparisons Change Tracking Unique Identifiers and Primary Keys CCG Roles Copyright 2013, Oracle. All rights reserved. Page 4

5 CCG Snapshots and Comparisons Snapshot Definitions Snapshot Occurrences Snapshot Occurrence Reports Record Comparisons CCG Change Tracking Change Tracking Reports Change Tracking Definitions Change Tracking Status Reports Change Tracking Data Change Tracking Queries and Alerts Change Tracking Alert Recipients Additional CCG Activities Scheduling Snapshots Performing Forced Comparisons Creating Templates Purging Change Tracking Data Defining Security Groups and Users Copyright 2013, Oracle. All rights reserved. Page 5