Case Study
Company
ABC Company is a global leader in its industry, employing more than 10,000 employees with operations and manufacturing plants in several foreign countries. The company is headquartered in a major city in the United States and is publically traded on the New York Stock Exchange.
Challenges
Like many other US publically traded companies operating in multiple foreign countries, ABC Company must comply with Sarbanes-Oxley Act of 2002, and many other domestic and foreign accounting standards, laws and regulations.
GRC Requirements
Initially, the company wants to focus on improving internal controls over Segregation of Duties, Application Access Controls, Change Management and Configuration Management. The company also wants to implement a dashboard solution that will enable it to effectively manage and monitor these controls.
The company will also implement a solution to monitor Transaction Controls after they successfully accommodate their initial Governance, Risk and Compliance (GRC) requirements.
Oracle GRC Solution
The following table maps the company’s GRC requirements to the Oracle GRC applications, which accommodate each of these requirements.
Table 1: Map GRC Requirements to Oracle GRC Applications
|
GRC Requirement |
Oracle GRC Solution |
| Segregation of Duties | Application Access Controls Governor (AACG) 8.5 |
| Application Access Controls (User Provisioning) | Preventive Controls Governor |
| Change Management and Configuration Management Controls | Configuration Controls Governor (CCG) 5.5.1 |
| Dashboards and Analytics | GRC Intelligence (GRCI) 3.0 |
| Transaction Controls | Transaction Controls Governor (TCG) 8.5 |
Current State
ABC Company has implemented Release 11.5.10.2 Oracle Financials, Manufacturing, HRMS, CRM, Supply Chain and other Oracle suites of applications. The company is also in the process of implementing (i.e. not upgrading) Release 12.1.2 Oracle Financials for one of its major organizations. The company plans to migrate all of its operations from Release 11.5.10.2 to Release 12.1.2 in the near future.
Architecture Requirements
Review the Oracle GRC Support Matrix to help identify the architecture requirements to support the Oracle GRC applications.
