Introduction to the Oracle GRC Platform

1
Introduction to the Oracle GRC Platform
OIC
Oracle Independent Consultants Oracle GRC
Professionals

• We Implement GRC Solutions Using Oracle GRC
  Applications

2
Story Board

• Identify and Describe the Oracle Governance, Risk
  and Compliance (GRC) Technology Products and
  Applications
• Links to Resources
• Introduction to OIC on YouTube
• OIC Contact Information

3
Oracle GRC Platform Applications

• Oracle GRC Insight
• GRC Intelligence (GRCI) 3.0
• Oracle GRC Process Management
• Enterprise GRC Manager (EGRCM) 8.0
• Oracle GRC Application Controls
• Application Access Controls Governor (AACG) 8.5
• Transaction Controls Governor (TCG)
• Configuration Controls Governor (CCG) 5.5.1
• Preventive Controls Governor (PCG) 7.3.1

4
Oracle GRC Platform Technology Products

• Oracle Audit Vault
• Oracle Database Vault
• Oracle Identity Access Management Suite
• Oracle Access Manager
• Oracle Identity Manager
• Oracle Identity Federation with Fedlet
• Oracle Directory Services Plus
• Oracle Enterprise Manager
• Application Management Products
• Middleware Management Products
• Database Management Products
• Hardware Management Products
• Heterogeneous Management Products

5
Oracle GRC Platform

• Oracle GRC Insight
• Oracle GRC Process Management
• Oracle GRC Application Controls
• Oracle GRC Technology Controls

6
Oracle GRC Insight

• Oracle Fusion Governance, Risk, and Compliance
  Intelligence (Fusion GRC Intelligence)

7
Oracle GRC Process Management

• Centralize GRC Content. Automate Risk and
  Compliance Processes. Monitor Control Status.
• Benefits
• Single central repository for policies, risks,
  and controls
• Automation of compliance and risk management
  workflows
• Oversight of automated and manual control
  activities
• Resources
• Oracle Enterprise Governance, Risk, and
  Compliance Manager - Fusion Edition
• Data sheet Oracle Enterprise Governance, Risk,
  and Compliance Manager - Fusion Edition (PDF)
• Download your FREE exclusive Open Compliance and
  Ethics Group (OCEG) white paper "CIO at the
  Center Critical Conversations for Driving
  Principled Performance
• The Economist Intelligence Unit white paper,
  "Fortifying the Enterprise GRC Strategies"

8
Oracle GRC Application Controls

• Application Access Controls Governor (AACG) 8.5
• Transaction Controls Governor (TCG) 8.5
• Configuration Controls Governor (CCG) 5.5.1
• Preventive Controls Governor (PCG) 7.3.1

9
Application Access Controls Governor (AACG) 8.5

• Real-Time Enforcement of Segregation of Duties
  and Access Policies
• Benefits
• Real-time monitoring and enforcement of SOD
  controls, including prevention of access
  provisioning that would jeopardize SOD
• Graphical simulation to look into access points,
  detect SOD conflicts, and evaluate treatment
  options
• Comprehensive library of best practice SOD
  controls
• Resources
• Data sheet Oracle Application Access Controls
  Governor (PDF)

10
Transaction Controls Governor (TCG) 8.5

• Continuous Monitoring of Business Transactions
• Benefits
• Continuous monitoring of transactions across
  processes including Procure-to-Pay,
  Order-to-Cash, Hire-to-Retire, and
  Record-to-Report
• Statistical logic to systematically uncover
  inappropriate or suspicious transactions and
  control violations
• Intuitive authoring of access, master data, and
  transaction controls
• Resources
• Data sheet Oracle Transaction Controls Governor
  (PDF)

11
Configuration Controls Governor (CCG) 5.5.1

• Powerful, Flexible Control over Application
  Integrity and Functionality
• Benefits
• Monitor key setups for any change, track "Who,
  What, Where and When," and receive notification
  of critical setup changes
• Document application setup with point-in-time
  snapshots
• Identify changes and discrepancies with snapshot
  comparisons, to manage changes that can have
  significant financial or regulatory impact
• Resources
• Data sheet Configuration Controls Governor
  (PDF)

12
Preventive Controls Governor (PCG) 7.3.1

• Ensure Data Quality and Privacy with Granular
  Control
• Benefits
• Enforcement of data quality policies such as
  mandatory fields, customizable LOVs (Lists of
  Values) and insertion of default values
• Enforcement of tolerance limits, such as maximum
  values for transactions required to meet
  regulatory or corporate requirements Restriction
  of user views, allowing users to view only the
  fields needed to complete a legitimate
  transaction
• Resources
• Data sheet Oracle Preventive Controls Governor
  (PDF)

13
Oracle GRC Technology Controls

• Oracle Audit Vault
• Oracle Database Vault
• Oracle Identity Manager (IdM)
• Oracle Enterprise Manager

14
Oracle Database Vault

• Reduce the Cost of Protecting Data
• Benefits
• Pro-actively safeguard application data stored in
  the Oracle database
• Address regulatory requirements
• Restrict ad-hoc access to application data
• Deploy with confidence
• Resources
• Data sheet Oracle Database Vault for Oracle
  E-Business Suite (PDF)
• Data sheet Oracle Database Vault (PDF)
• Oracle Database Vault with Oracle Database 11g
  Release 2 (PDF)
• Cost Effective Security and Compliance with
  Oracle Database 11g Release 2 (PDF)

15
Oracle Audit Vault

• Reduce the Cost of Compliance Reporting and
  Database Monitoring
• Benefits
• Simplify compliance reporting
• Detect threats quickly
• Lower IT costs with audit policies
• Transparently collect and consolidate audit data
• Provide a secure and scalable repository
• Resources
• Data sheet Oracle Audit Vault (PDF)
• Oracle Audit Vault (PDF)
• Oracle Audit Vault Technical Information

16
Oracle Identity and Access Management Suite Plus

• Comprehensive, Best-in-Class, Hot-Pluggable
  Solution
• Benefits
• Faster deployments
• Improved security
• Lower TCO
• Resources
• Data sheet Introduction to Oracle Identity
  Manager (PDF)
• Attestation of Identity Information
• Oracle Identity Federation
• Oracle Identity Management Solutions Technical
  Information
• Data sheet Introduction to Oracle Identity
  Management 11g (PDF)

17
Oracle Identity and Access Management Suite
Applications

• Oracle Access Manager
• Oracle Identity Manager
• Oracle Identity Federation with Fedlet
• Oracle Directory Services Plus

18
Oracle Access Manager

• User Access Management for Secure Business
  Interactions
• Benefits
• Strong authentication for secure access control
• Seamless interoperability for the heterogeneous
  enterprise
• Identity administration combined with access
  control
• Resources
• Oracle Access Manager
• Feature overview Oracle Access Manager
• FAQ Oracle Access Manager (PDF)
• Data sheet Introduction to Oracle Access Manager
  (PDF)
• Data sheet Oracle Access Management Solution
  (PDF)
• Oracle Access Manager (PDF

19
Oracle Identity Manager

• Core Technology for User Provisioning and
  Cost-Efficient Compliance
• Benefits
• Increase enterprise productivity and security
• Sustainable compliance
• Proven scalability
• Resources
• Oracle Identity Manager Technical Information
• Data sheet Introduction to Oracle Identity
  Manager (PDF)
• Attestation of Identity Information
• Oracle Identity Management for SAP Applications
  (PDF

20
Oracle Identity Federation with Fedlet

• Cross-Domain User Access for Seamless Business
  Integration
• Benefits
• Rapid deployment
• Securely extend business capabilities
• Standards based interoperable architecture offers
  scalability
• Resources
• Oracle Identity Federation Technical
  Information
• Data sheet Introduction to Oracle Identity
  Federation 11g (PDF)
• Oracle Identity Federation 11g (PDF)
• Federated Identity Management (video, 3 min.)
• Solving Directory Integration Issues (video, 3
  min.)

21
Oracle Directory Services Plus

• Oracle Directory Server Enterprise Edition
• Benefits
• Rapid deployment
• Securely extend business capabilities
• Standards based interoperable architecture offers
  scalability
• Resources
• Oracle Directory Server EE - Data Sheet
  Technical Information
• Oracle Directory Server EE Features Technical
  Information
• Benefits of Using Solaris 10 OS with Oracle
  Directory Server EE - Whitepaper
• Benefits of an Exclusive Multimaster Deployment
  of Oracle Directory Server EE - Whitepaper

22
Oracle Enterprise Manager

• Application Performance Management
• Lifecycle Management
• Configuration and Change Management
• Application Quality Management
• Benefits
• Greater business value
• Maximum return on IT investment
• Unparalleled customer satisfaction
• Resources
• Oracle Enterprise Manager Technical Information
• Oracle Enterprise Manager Resource Center

23
Oracle Enterprise Manager Products

• Application Management Products
• Middleware Management Products
• Database Management Products
• Hardware Management Products
• Heterogeneous Management Products

24
Resources

• Oracle GRC Portal
• OIC Oracle GRC Training Portal
• OIC YouTube Channel
• OIC Blog

25
OIC Contact Information

• Roger Drolet, CPA, MBA, CISA, CITP
• Roger.drolet_at_theoicllc.com
• www.theoicllc.com
• www.youtube.com/theoicllc
• www.oracleelearning.com/moodle
• 1-214-783-0751

26
Conclusion

• Thank you for taking the time to learn more about
  the OIC and Oracle Governance, Risk and
  Compliance (GRC) Technology Products and
  Applications.