Global car and heavy equipment rental company, improves employee productivity with ERP Role Designer/Monitor

Transcription

1 Global car and heavy equipment rental company, improves employee productivity with ERP Role Designer/Monitor FulcrumWay Leading Provider of Enterprise Risk Assessment Mitigation and Remediation Solutions Enterprise Risk Management Financial Close Monitor Advanced Controls Catalog Enterprise Audit GRC Monitor Leverage T echnology: Move Your Business Forward Give me a lever long enough and a fulcrum on which to place it, and I shall move the world - Archimedes Copyright. Fulcrum Information Technology, Inc.

2 Page 2 Introduction FulcrumWay Intelligent, Integrated Instant Risk Management FulcrumWay: is the #1 End-to-End Provider of Enterprise Risk Management Expertise, Solutions and Software Services for Oracle EBS, PeopleSoft and JDE customers with over 200 Fortune-500 to Middle Market clients. Since 2003, we have successfully assisted companies across all major industry segments. Expertise: Risk Advisory Services. Advanced Controls Design for Enterprise Business Applications. Best Practices for Risk Mitigation and Internal Controls Automation. Audit, Compliance, Financial, Enterprise and Operational Risk Assessments. Risk Remediation Services such as Segregation of Duties. Packaged Solutions: FulcrumWay is the #1 choice of Oracle customers for Oracle GRC Manager, GRC Controls and GRC Intelligence/OBIEE software implementation. Oracle has certified us as the only partner with Accelerators for Oracle GRC. We also provide Managed Services and Hosting for Oracle GRC applications. Software Services: Risk Management Tools: Enterprise Risk Manager, Financial Close Risk Manager, Risk Based Audit Manager, IT Risk Workbench, and Advanced Controls Catalog. Data Management Tools: Rules Repository, DataProbe adaptors and Data Hub. USA Presence: Privately held Delaware Corporation with US offices in New York City, Dallas and San Francisco International Presence: in Chennai, Dubai, Kampala, London, Rome, Santiago, Singapore

3 Page 3 Our Experience FulcrumWay Clients Government Oil and Gas Financial Services Retail Communications Manufacturing Industrial Equipment Natural Resources Media and Entertainment Healthcare High Tech Life Sciences

4 Page 4 Our Experience FulcrumWay Insight Thought Leadership Co-Authored GRC Book: First book on GRC for Oracle Applications Executive Round Tables GRC Solutions for Energy Industry, Houston, November 2012 OAUG GRC Solution Lab - April 7 th 11 th Denver: GRC Case Studies and Best Practices IIA - Presentations - Top Five Reasons for Automating Application Controls Collaborate 13 GRC Client Appreciation Dinner April 9 th, 2013 Denver Webcasts GRC Best Practices, Trends and Expert Insight Oracle Open World Annual GRC Dinner on September 23 rd, 2013 W Hotel San Francisco LinkedIn FulcrumWay Risk, Compliance and Audit Software Group YouTube Podcasts FulcrumWay Instant Insight in 10 min or less

5 FulcrumWay Application Controls Management Best Practices Page 5 Scope Application Controls Manage Exceptions Setup Preventive Controls Assess Risk Establish Test Environment Detect Violations Analyze Issues Remediate Issues Implement Corrective Actions Monitor Application Environment Sample ERP Data Application Controls Manager IT/Business Control Teams Application Security Administrator Application Controls Manager

6 Intelligent Integrated Instant Page 6 Overview FulcrumWay Enterprise Risk Management Services Enterprise Risk Monitors Risk Assessment Key Risk Indicators Enterprise Survey Compliance Certification Incident Monitor Financial Close Management Risk Based Operations Audit Management Task Monitor Enterprise Audit Manager Audit Planner Variance Analytics Reconciliation Analytics Controls Verification Control Analytics Financial Controls: (GL,AP,AR,FA,CM) Business Rules Repository - Advanced Application Controls HCM/HR Controls : (HR,PR) Distribution Controls: (OM,INV,WMS,PO) Supply Chain Controls : (ENG,QP,WIP,BOM) Access Monitor Configuration Monitor GRC Monitor Enterprise Data Security Incident Monitor Master Data Monitor Database Vulnerabilities FulcrumWay Core Technologies DataProbe DataHub Rules Repository Rules Engine Monitors Transmitters

7 Client case Our Client Leader in the car and equipment rental businesses worldwide Providing quality car rental service for over 90 years. Over 30,000 employees Challenges Replace multiple legacy systems with one ERP solution Improved Segregation of Duty controls within mission critical applications Maintain consistent ERP system access roles across the subsidiaries leveraging the shared services model Increase external auditor s reliance on ERP Access Controls Monitoring Solutions GRC DataProbe ERP Controls Catalog ERP Roles Monitor Global car and equipment rental company, improves employee productivity Results: Reduce ERP Role design, build, testing and implementation time by 80% resulting in over $200,000 cost savings during ERP system implementation and global roll-out. Created over 100 Segregation of Duty compliant Roles by business segment with two weeks from FulcrumWay Role Templates within the controls catalog. Lowered ERP Total Cost of Ownership by reducing SoD remediation time and costs by ensuring that all users a assigned only the preapproved Roles Improve SoD and Access Controls testing time by providing auditors the access log reports showing all Update, Review and Approve Role design changes. Accelerated ERP testing and deploying time by identifying SOD conflicts before the Roles are assigned to Users. Page 7

8 ERP Roles Manager Features Role Manager is an ERP security design tool Contains a pre-configured catalog of roles which comply with segregation of duty (SOD) policies. Roles by ERP module and typical access requirements for those modules such as Manager, Supervisor, Clerk, Inquiry, Business Setup and IT Setup. You can use this tool to view existing role templates and design new roles by easily selecting or deselecting ERP functions/transaction. Once you complete the roles design, you can send it, using workflows, to pre-assigned reviewers and approvers to finalize the roles. The role preparers, reviewers and approvers can also assess the SOD control risks before finalizing the roles. Leverage FW DataProbe/Scripts to load current Roles Secure Access from fulcrumway.com portal Page 8

9 Page 9 Roles Manager Access to Roles Manager Sign in at fulcrumway.com

10 Page 10 Roles Manager Access to Roles Manager Select the Access Monitor Icon. Then click on the Maintain Access Roles Tab

11 Page 11 Roles Manager Access to Roles Manager Use a source role to create a new target role. View existing SOD issues with the source role. Assign Reviewers and Approvers for the role

12 Page 12 Roles Manager Access to Roles Manager Select / Deselect business activities to update Role configuration automatically

13 Page 13 Roles Manager Access to Roles Manager Select / Deselect Report Sets to update Role configuration automatically

14 Page 14 Roles Manager Access to Roles Manager Review and approve Roles notifications