OIC Blog

Case Study

Company

ABC Company is a global leader in its industry, employing more than 10,000 employees with operations and manufacturing plants in several foreign countries.  The company is headquartered in a major city in the United States and is publically traded on the New York Stock Exchange.

Challenges

Like many other US publically traded companies operating in multiple foreign countries, ABC Company must comply with Sarbanes-Oxley Act of 2002, and many other domestic and foreign accounting standards, laws and regulations.

GRC Requirements

Initially, the company wants to focus on improving internal controls over Segregation of Duties, Application Access Controls, Change Management and Configuration Management.  The company also wants to implement a dashboard solution that will enable it to effectively manage and monitor these controls.

The company will also implement a solution to monitor Transaction Controls after they successfully accommodate their initial Governance, Risk and Compliance (GRC) requirements.

Oracle GRC Solution

The following table maps the company’s GRC requirements to the Oracle GRC applications, which accommodate each of these requirements.

Table 1: Map GRC Requirements to Oracle GRC Applications

Current State

ABC Company has implemented Release 11.5.10.2  Oracle Financials, Manufacturing, HRMS, CRM, Supply Chain and other Oracle suites of applications.  The company is also in the process of implementing (i.e. not upgrading) Release 12.1.2 Oracle Financials for one of its major organizations.  The company plans to migrate all of its operations from Release 11.5.10.2 to Release 12.1.2 in the near future.

Architecture Requirements

Review the Oracle GRC Support Matrix to help identify the architecture requirements to support the Oracle GRC applications.

Introduction

The Governance, Risk and Compliance (GRC) market is a relatively new market and the demand for GRC products and services is growing in spite of the current economic climate.  Many Accounting, Auditing, and Oracle Finance Professionals are interested in learning more about Oracle GRC Technology Products and/or Applications.  Some of these professionals realize very quickly that they can leverage their Accounting, Auditing and/or Oracle Financials experience to become proficient implementing GRC Solutions using the Oracle GRC Technology Products and/or Applications.

Oracle GRC Platform

The first step is to become familiar with the Oracle GRC Technology Products and Applications included in the Oracle GRC Platform.  You accomplish this by viewing the OIC presentation Introduction to the Oracle Governance, Risk and Compliance (GRC) Platform.  You can also download the accompanying PowerPoint presentation.  The PowerPoint presentation provides links to the Oracle GRC Portal, which you can use to quickly learn more about each Oracle Technology Product and/or Application included in the Oracle GRC Platform.

What is Reality GRC?

Reality GRC is an OIC Blog, which you can use to participate in the installation and/or implementation of one or more Oracle GRC Technology Products and/or Applications.  We (OIC) installed the Oracle GRC Technology Products and Applications included in the Oracle GRC Platform on our dedicated server hosted by The Planet.  The Planet is the largest privately held hosting company in the world and is SAS 70 Type II compliant.  We have also installed Release 12.1.1 of the Oracle Vision Demo EBS Instance.

We will use the collective experience of Oracle GRC Professionals to develop case studies of the installation and/or implementation of one or more of the Oracle GRC Technology Products and/or Applications.  We will use fictitious companies with real world GRC requirements to develop these case studies.  Additionally, we will use the OIC tools and resources to implement an Oracle GRC solution to provide our participants with an opportunity to gain “hands on” experience using the Oracle GRC Technology Products and/or Applications.

We Need Oracle GRC Professionals

We need Oracle GRC Professionals to place on projects installing and implementing the Oracle GRC Technology Products and Applications.  If you wish to be considered for one of these Oracle GRC contract positions, please forward your resume to roger.drolet@theoicllc.com.  You must have hands on experience installing and/or implementing and using one of more of the following Oracle Applications and/or Technology Products:

Oracle GRC Applications

¡  Oracle GRC Insight

• GRC Intelligence (GRCI) 3.0

¡  Oracle GRC Process Management

• Enterprise GRC Manager (EGRCM) 8.0

¡  Oracle GRC Application Controls

• Application Access Controls Governor (AACG) 8.5
• Transaction Controls Governor (TCG)
• Configuration Controls Governor (CCG) 5.5.1
• Preventive Controls Governor (PCG) 7.3.1

Oracle GRC Technology Products

¡  Oracle Audit Vault

¡  Oracle Database Vault

¡  Oracle Identity & Access Management Suite

• Oracle Access Manager
• Oracle Identity Manager
• Oracle Identity Federation with Fedlet
• Oracle Directory Services Plus

¡  Oracle Enterprise Manager

• Application Management Products
• Middleware Management Products
• Database Management Products
• Hardware Management Products
• Heterogeneous Management Products

This program provides you with access to the entire suite of Oracle Governance Risk and Compliance (GRC) Applications Controls for ninety (90) days.  This program also includes access to Release 12.1.1 of the Oracle E-Business Suite Vision Demo Instance, which is integrated with these Oracle GRC Applications.

1. Oracle Application Access Controls Governor (AACG) 8.5
2. Transaction Controls Governor (TCG) 8.5
3. Configuration Controls Governor (CCG) 5.5.1
4. Preventive Controls Governor (PCG) 7.3.1

When you subscribe to this program you become an OIC Contractor for ninety (90) days, which enables you to access our applications, My Oracle Support and the Oracle Partner Network (OPN).  This provides you with access to all of the Oracle documentation for these applications.  In addition, you will have access to all of the resources available on the Oracle Partner Network.

This program is ideal for Oracle Financial Professionals who want to become proficient implementing and using the Oracle GRC Applications.  You will be able to gain “hands on” experience working with the Oracle GRC applications.

When you feel comfortable with one or more of the Oracle GRC applications, you can take one of our Oracle GRC assessment exams, which assesses your knowledge of an Oracle GRC application as well as your communications skills.  If you pass the assessment exam and have, at least, good oral and written communication skills, you can use the OIC as a reference.  Moreover, we will aggressively promote your services and attempt to place you on one of our Oracle GRC projects.

The OIC does not guarantee that we will be able to successfully place you on an Oracle GRC project.

Go to http://www.theoicllc.com/membership to learn more and register for this program.

About the OIC

The Oracle Independent Consultants (OIC) is an Oracle Gold Partner.  We focus solely on providing Oracle Governance, Risk and Compliance (GRC) training, services and resources.