Leading investor communications firm serving brokerdealers, and investment banks protects sensitive data

Transcription

1 Leading investor communications firm serving brokerdealers, and investment banks protects sensitive data FulcrumWay Leading Provider of Enterprise Risk Assessment Mitigation and Remediation Solutions Enterprise Risk Management Financial Close Monitor Advanced Controls Catalog Enterprise Audit GRC Monitor Leverage T echnology: Move Your Business Forward Give me a lever long enough and a fulcrum on which to place it, and I shall move the world - Archimedes Copyright. Fulcrum Information Technology, Inc.

2 Page 2 Introduction FulcrumWay Intelligent, Integrated Instant Risk Management FulcrumWay: is the #1 End-to-End Provider of Enterprise Risk Management Expertise, Solutions and Software Services for Oracle EBS, PeopleSoft and JDE customers with over 200 Fortune-500 to Middle Market clients. Since 2003, we have successfully assisted companies across all major industry segments. Expertise: Risk Advisory Services. Advanced Controls Design for Enterprise Business Applications. Best Practices for Risk Mitigation and Internal Controls Automation. Audit, Compliance, Financial, Enterprise and Operational Risk Assessments. Risk Remediation Services such as Segregation of Duties. Packaged Solutions: FulcrumWay is the #1 choice of Oracle customers for Oracle GRC Manager, GRC Controls and GRC Intelligence/OBIEE software implementation. Oracle has certified us as the only partner with Accelerators for Oracle GRC. We also provide Managed Services and Hosting for Oracle GRC applications. Software Services: Risk Management Tools: Enterprise Risk Manager, Financial Close Risk Manager, Risk Based Audit Manager, IT Risk Workbench, and Advanced Controls Catalog. Data Management Tools: Rules Repository, DataProbe adaptors and Data Hub. USA Presence: Privately held Delaware Corporation with US offices in New York City, Dallas and San Francisco International Presence: in Chennai, Dubai, Kampala, London, Rome, Santiago, Singapore

3 Page 3 Our Experience FulcrumWay Clients Government Oil and Gas Financial Services Retail Communications Manufacturing Industrial Equipment Natural Resources Media and Entertainment Healthcare High Tech Life Sciences

4 Page 4 Our Experience FulcrumWay Insight Thought Leadership Co-Authored GRC Book: First book on GRC for Oracle Applications Executive Round Tables GRC Solutions for Energy Industry, Houston, November 2012 OAUG GRC Solution Lab - April 7 th 11 th Denver: GRC Case Studies and Best Practices IIA - Presentations - Top Five Reasons for Automating Application Controls Collaborate 13 GRC Client Appreciation Dinner April 9 th, 2013 Denver Webcasts GRC Best Practices, Trends and Expert Insight Oracle Open World Annual GRC Dinner on September 23 rd, 2013 W Hotel San Francisco LinkedIn FulcrumWay Risk, Compliance and Audit Software Group YouTube Podcasts FulcrumWay Instant Insight in 10 min or less

5 FulcrumWay Application Controls Management Best Practices Page 5 Scope Application Controls Manage Exceptions Setup Preventive Controls Assess Risk Establish Test Environment Detect Violations Analyze Issues Remediate Issues Implement Corrective Actions Monitor Application Environment Sample ERP Data Application Controls Manager IT/Business Control Teams Application Security Administrator Application Controls Manager

6 Intelligent Integrated Instant Copyright FulcrumWay Page 6 Overview FulcrumWay Enterprise Risk Management Services Enterprise Risk Monitors Risk Assessment Key Risk Indicators Enterprise Survey Compliance Certification Incident Monitor Financial Close Management Risk Based Operations Audit Management Task Monitor Enterprise Audit Manager Audit Planner Variance Analytics Reconciliation Analytics Controls Verification Control Analytics Financial Controls: (GL,AP,AR,FA,CM) Business Rules Repository - Advanced Application Controls HCM/HR Controls : (HR,PR) Distribution Controls: (OM,INV,WMS,PO) Supply Chain Controls : (ENG,QP,WIP,BOM) Access Monitor Configuration Monitor GRC Monitor Enterprise Data Security Incident Monitor Master Data Monitor Database Vulnerabilities FulcrumWay Core Technologies DataProbe DataHub Rules Repository Rules Engine Monitors Transmitters

7 Client case Protect Enterprise Data against Cyber Threats and Internal Vulnerabilities Our Client A leading provider of investor communications and technology-drivensolutions to banks, broker-dealers, mutual funds, and corporations globally. Challenges Prevent inappropriate or unauthorized modifications of database schema, and copying sensitive data Detect data modifications from privileged user access Monitor legitimate application user accounts such as APPS in Oracle E-Business Suite to access or update data without detection. Monitor high volumes of data or access outside normal business hours without any business justification Results: Less internal / external audit costs related to data security 75% Over 40% reduction in database change control incidents Monitor 100% of all direct access to enterprise data and prevents unauthorized access and changes to the data stored in ERP systems, and data warehouses Improvement in compliance with regulatory policies such as SOX, PCI, EU Data Directive, etc. Elimination of direct access to database from applications such as TOAD for Oracle databases, Microsoft Excel, DB Links, JDBC, ODBC and other direct connections to the database that bypass any monitoring controls. Solutions GRC DataProbe Database Vulnerabilities Monitor ERP Access Monitor Copyright FulcrumWay Page 7

8 Page 8 FulcrumWay Core DataProbe Setup

9 Page 9 FulcrumWay Core DataProbe Setup

10 Page 10 FulcrumWay Core DataProbe Setup