Oracle Fusion Security Simplified

Transcription

1 Oracle Fusion Security Simplified FulcrumWay Leading Provider of Enterprise Risk Assessment Mitigation and Remediation Solutions Enterprise Risk Management Financial Close Monitor Advanced Controls Catalog Enterprise Audit GRC Monitor Leverage T echnology: Move Your Business Forward Give me a lever long enough and a fulcrum on which to place it, and I shall move the world - Archimedes Copyright. Fulcrum Information Technology, Inc.

2 Simplifying Security with Fusion Applications Security Console Nigel King Vice President Ryan Golden Software Architect

3 The following is intended to outline our general product direction. It is intended for information purposes only, and may not be incorporated into any contract. It is not a commitment to deliver any material, code, or functionality, and should not be relied upon in making purchasing decisions. The development, release, and timing of any features or functionality described for Oracle s products remains at the sole discretion of Oracle. 3

4 Program Agenda Challenges in Security Administration Shaping Security to Match Your Business Staying Ahead of Changes Demo Q&A 4

5 Challenges in Security Administration 5

6 The Security Diaspora One tool for role design One tool for user provisioning One tool for data security management One tool for supporting end user access and authorization issues One tool for upgrade assessment 6

7 NO GLOBAL VIEW 7

8 Envision a Global View Single UI for all security activities Visualization of the entire security model Assisted search across all security artifacts 8

9 Single Entry Point 9

10 Visualizing the Security Model 10

11 Shape Security to Match Your Business 11

12 Role Design and Customization Challenges Leverage the Fusion Applications security reference model Customize roles from a business or menu perspective Match privileges to on-screen elements Adjust the reference roles Test the resulting user interface 12

13 Role Copy 13

14 Menu Simulator 14

15 Stay Ahead of Changes 15

16 Product Upgrade Challenges Disruptive new functionality Identifying the new functionality Fitting new functionality to your existing model Identifying users that need to be (re)trained Offering a complete security assessment 16

17 Role Comparison 17

18 Graphic Section Divider DEMO 18

19 Scenario: Assessing Product Upgrade Impact Solutions Unified Search Compare Roles Security Model Visualization 19

20 Scenario: Help Desk User Missing a Menu Solutions Unified Search Security Model Visualization Graph Pivot Menu Simulator Copy Role 20

21 Copyright FulcrumWay Page 21 FulcrumWay Fusion Security and Oracle Enterprise Governance Risk and Compliance by Tony Olivo Sr. Client Services Director

22 Copyright FulcrumWay Page 22 Fusion RBAC Security GRC Security Components User Job Role Duty Role Data Role Privileges Module Document State Action Perspective

23 Copyright FulcrumWay Fusion RBAC Security Manage User Security User Management Page 23 Manage user community across the application. A user s access is the combination of all their assigned job roles

24 Fusion RBAC Security Using Perspectives on Objects Perspectives are used to secure data. A Perspective node is assigned to an object. That object is only available to a user that has that perspective node assigned to their data role for that object. Sample Perspective ABC Company North America Latin America Europe New York Mexico London Chicago Paris Los Angeles Copyright FulcrumWay Page 24

25 Fusion RBAC Security Using Perspectives on Objects Perspectives can be associated with various objects AACG / TCG Continuous Controls Models Incidents EGRCM Process Risk Control Copyright FulcrumWay Page 25

26 Copyright FulcrumWay Page 26 Fusion RBAC Security EGRC Objects Secured by RBAC Models View and Manage Access Continuous Controls View and Manage Access Incidents AACG and TCG View, Manage and Investigator Access

27 Fusion RBAC Security EGRC Objects Secured by RBAC Following EGRCM objects have View, Manage, Review and Approve job roles Perspective Process Risk Control Issue Remediation Plans EGRCM Copyright FulcrumWay Page 27

28 Copyright FulcrumWay Fusion RBAC Security Sample Job Roles Page 28 OOTB INCIDENT RESULT MANAGER JOB ROLE

29 Copyright FulcrumWay Fusion RBAC Security Sample Job Roles Page 29 OOTB INCIDENT RESULT MANAGER JOB DATA ROLE

30 Copyright FulcrumWay Fusion RBAC Security Sample Custom Job Roles Page 30 CUSTOM INCIDENT RESULT MANAGER JOB DATA ROLE

31 Copyright FulcrumWay Page 31 Summary and Q&A Thank You! Join us on LinkedIn to view webinar and discussion