Showing posts with label access. Show all posts
Showing posts with label access. Show all posts

Security Strategies for Risk Management Cloud (draft)

Cloud Security Methodology can be summarized with a simple statement: "WHO can do WHAT on WHICH set of data?" where:
  1. WHO is the User
  2. WHAT actions the user can perform, reflected in job and duty roles
  3. WHICH set of data is reflected in data security policies
An example is below:

Security Processes




For more full-detailed Tutorials and Tips, check out #TheOracleProdigy at https://lifeofanoracleprodigy.blogspot.com/
Follow The Oracle Prodigy on Facebook (https://www.facebook.com/theOracleProdigy/) and Twitter (https://twitter.com/D_OracleProdigy)

Overview of Advanced Controls Management in Risk Management Cloud

What is Advanced Controls Management?

Advanced Controls Management is concerned with the testing of Financial Transactions and the segregation of duties. ACM is further broken down into two:

  1. Advanced Access Controls
  2. Advanced Financial Controls

Advanced Access Controls


Why is there a need for Advanced Access Controls?
  1. Stop Payment Fraud and Error
  2. Prevent Insider Data Breaches
  3. Remove Blind Spots and stay ahead of Emerging Risks
Advanced Access Control is used to monitor users who have access to do the following:



One example of the use and importance of Advanced Access control is the Analysis of Access Privileges.

Advanced Access control can be used to detect a User that has the capability to create a Supplier and Create an Invoice. This is a risk for Fraud and a violation of Segregation of Duties.

Another one is when a Buyer is a also an AP Supervisor. A buyer can create purchase orders and pay Invoices at the same time. This is also a risk for Fraud and a violation of Segregation of Duties.



Advanced Financial Controls




Why is there a need for Advanced Financial Controls?



  • Automate Detection of Fraud, Error and Policy Violation
  • Stop High Risk Transactions such as
    • Identical Expenses
    • Split Purchase Orders
    • Duplicate Invoices
    • Unusual Invoice Amounts
    • Unauthorized Spending
    • Blocked Suppliers
    • User Creates Supplier & Pays Invoices
Advanced Controls Management Best Practice






For more full-detailed Tutorials and Tips, check out #TheOracleProdigy at https://lifeofanoracleprodigy.blogspot.com/
Follow The Oracle Prodigy on Facebook (https://www.facebook.com/theOracleProdigy/) and Twitter (https://twitter.com/D_OracleProdigy)

Recent Posts

SQL Fundamentals

Introduction to SQL and Syntax What is SQL? SQL stands for Structured Query Language. is a standard programming language for accessing datab...

Top Posts