Continuous Monitoring for Oracle Applications

1
Continuous Monitoring for Oracle Applications

• March 11, 2004

2
Continuous Monitoring in Oracle Applications
transactions
Oracle Applications environment
Integra Transaction
APPLIMATIONINTEGRA
security
Integra Access
setups
Integra Apps
code
Integra Codebase
3
Sarbanes-Oxley Hurdles
4
Accounting Systems
5
Integra Apps
6
Example of System Controls

• 3 way matching of PO, Invoice and Receipt
• Document spending limits (authorization of PO)
• Security rules/access to sensitive transactions
• employee salaries
• chart of account values
• financial statement reports (FSGs)
• price lists
• inventory attributes
• Action for late delivery of goods
• Inventory stocking rules
• Rules to create tax on sales orders
• Depreciation methods

7
Automated Documentation Snapshot

• Point-in-time picture
• Run on demand or scheduled

8
Snapshot Report
9
Comparison Report
Differences
10
Automated Change Tracking

• Integra Apps - Change Tracking
• Who?
• What?
• When?
• Where?

Automatically captures a complete historical
audit trail. Details of EVERY change.
11
Change Tracking
When?
What?
Who?
Where?
12
On-line Change Tracking
13
Integra Access

• Evaluate User Access
• Search for Segregation of Duties Issues

14
Integra Access
User

• Evaluate User Access
• Search by User
• Search by Form/Function

• Search for Segregation of Duties
• Identify incompatible Functions Forms

15
Segregation of Duties
16
Integra Transaction

• Monitor transactions for anomalies
• Identify thresholds
• Alert notifications

17
Financials Bundle 1
18
Integra - Applied
19
Integra - Applied
FDA Certification - version/change control
system for manufacturing applications
Fraud detection and internal control of key
controls
20
Continuous Monitoring in Oracle Applications
transactions
Integra Transaction
security
Integra Access
setups
Integra Apps
code
Integra Codebase
21
Architecture
Test (11i)
Dev (10.7)
Prod 1 (11.0.3)
Prod 2 (10.7)
Applimation Home
Secure Oracle DB Repository (installs in 1 day)

• Connectivity
• Ease of configuration
• Mitigate violations