improve your jd edwards audit (and your business) with the right security model

28
Title Steve Spencer Improve your JD Edwards audit (and your business) with the right security model

Upload: insync-conference

Post on 13-May-2015

618 views

Category:

Technology


3 download

DESCRIPTION

Presenter: Steve Spencer, Q Software

TRANSCRIPT

Page 1: Improve your JD Edwards audit (and your business) with the right security model

Title

Steve Spencer

Improve your JD Edwards audit (and your business) with the right security model

Page 2: Improve your JD Edwards audit (and your business) with the right security model

Title

Agenda

Improve your World audit – The Shaw Group customer story

Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story

Security maintenance in 5 minutes – Morbark E1 customer story

Summary of security issues i World & E1

Local implementation partners

How SYSTIME can help

Page 3: Improve your JD Edwards audit (and your business) with the right security model

Title

Leading global provider of:

– Engineering Procurement

– Construction Technology

– Maintenance Fabrication

– Manufacturing Consulting

– Remediation Facilities Management

To:

– Government

– Private Sector

– US Nuclear Sector

Operations:

– 22,000 employees

Page 4: Improve your JD Edwards audit (and your business) with the right security model

Title

The Need– Make security more manageable– Make compliance more sustainable– Reduce the cost & effort involved– Implement tighter SoD controls– Become compliant / pass the next audit

Page 5: Improve your JD Edwards audit (and your business) with the right security model

Title

Customer Case Study: The Benefits

Significant reduction in security management effort

– Set up a new user in 5 minutes

– Add security for new country – 20 minutes!

Reduction in audit costs

– Both internal & external auditors “love it”

– Easy to test, prove & report on compliance

Easy to identify potential SoD violations

Easy to report on roles

– Set-up

– Security

– Assignments

– Audit trail of assignments / adoption

Passed the 2006, 2007 & 2008 audits

– “as different as night and day”

– “This is the best security set up we have ever seen”

Page 6: Improve your JD Edwards audit (and your business) with the right security model

Title

The customer’s and auditor’s feedback

“We could not have achieved this without QSoftware’s SEC-Qure World integrated security

compliance solutions.”

“This is the best security we have ever seen.”

Page 7: Improve your JD Edwards audit (and your business) with the right security model

Title

Agenda

Improve your World audit – The Shaw Group customer story

Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story

Security maintenance in 5 minutes – Morbark E1 customer story

Summary of security issues i World & E1

Local implementation partners

How SYSTIME can help

Page 8: Improve your JD Edwards audit (and your business) with the right security model

Title

Bibby Background

UKs leading independent logistics company

Part of Bibby Line Group– Over 200 years old– HQ in Liverpool– Group revenue $1.7 bn

Bibby Distribution– Revenue $310 m – 70 locations in UK– 2m sq ft warehousing– 2,300 employees– 800 vehicles

Page 9: Improve your JD Edwards audit (and your business) with the right security model

Title

Background

Bibby Distribution has been growing– Over the last 10 years

• Growth of 300%

– Organically• New depots / New contracts

– By acquisition• 8 businesses acquired• HLG was 30% of current revenue

Page 10: Improve your JD Edwards audit (and your business) with the right security model

Title

Why EnterpriseOne?

More capability than just accounts

Distribution-specific functionality

More flexible

More scalable

Long-term solution

Page 11: Improve your JD Edwards audit (and your business) with the right security model

Title

The set-up

JD Edwards EnterpriseOne 8,12 Tools 8.97 45 – 50 users at Head Office

– Sales Ledger– Purchase Ledger– General Ledger– Sales Order Processing– Fixed assets – very complex– Procurement

500 users across the depots– Procurement– Sales Order Processing– etc

Page 12: Improve your JD Edwards audit (and your business) with the right security model

Title

Implementation challenges

Tight timescales– Wanted go-live before next year-end

All new technology

No Oracle expertise

Complex requirements & structure– HO, Depots, relationship of depots to customers

Page 13: Improve your JD Edwards audit (and your business) with the right security model

Title

Why security was important

Very complex depot relationships– 1:1, 1:Many, Many:1 relationships– Segregation of duties– Time / effort / costs to resolve– Audit

Had to perform substantive audits– Compliance audits not possible– Time-consuming (costly)

Page 14: Improve your JD Edwards audit (and your business) with the right security model

Title

Why Bibby chose Q Software

Oracle advised E1 security would take 6-9 months

– Too long for project roll-out deadlines

– So went All Doors Open trying menu security

– Menu security = No security

Q Software’s SEC-Qure E1Config

– Simplified All Doors Open All Doors Closed

• Reducing effort by 80%

– Enabled enforcement of SoD

• Enhancing compliance

– Reduces security maintenance effort

• By about 50%

– Minimises potential for errors

• Fewer posting errors

– Reduces reporting time & accuracy

• From days to minutes

– Quick & easy to prove security controls

• Reduces auditing effort

Q Software very responsive– Excellent training, advice, consultancy and support

Cut

Page 15: Improve your JD Edwards audit (and your business) with the right security model

Title

Benefits Assisted by Q Software

Year end process went smoothly

– Still smiling, fewer sick days

Month end processes much quicker

– More time available to manage rather than just do accounting

Easy to set up temp role changes i.e. For holidays

– No need for temp staff, security assured

New contracts set up much quicker

– New customers up and running sooner

Few posting errors

– As staff program / data access controlled correctly

Much simpler & smoother audits

– Auditors happy with first security audit

– Just passed 2nd audit – no issues at all

Q Software helped reduce costs and increase revenues

Page 16: Improve your JD Edwards audit (and your business) with the right security model

Title

Bibby Distribution

“Q Software implemented security in a fraction of the time that Oracle had estimated”.

“Q Software contributes to significant cost savings throughout our business.”

Page 17: Improve your JD Edwards audit (and your business) with the right security model

Title

Agenda

Improve your World audit – The Shaw Group customer story

Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story

Security maintenance in 5 minutes – Morbark E1 customer story

Summary of security issues i World & E1

Local implementation partners

How SYSTIME can help

Page 18: Improve your JD Edwards audit (and your business) with the right security model

Title

Security maintenance in 5 minutes

Page 19: Improve your JD Edwards audit (and your business) with the right security model

Title

The problem

Small work-force

– Frequent need to change duties

• Short notice

Security time-consuming to manage

– Frequent interruptions to IT staff

Increased risk of high cost errors

– Due to unfamiliarity with new role

Page 20: Improve your JD Edwards audit (and your business) with the right security model

Title

The Solution

SEC-Qure® Config

– Capture existing security

– Test for conflicts

– Manage SoD

– Simplify on-going security maintenance

SEC-Qure® SoD

– SoD model management

– SoD violations reporting

Page 21: Improve your JD Edwards audit (and your business) with the right security model

Title

Agenda

Improve your World audit – The Shaw Group customer story

Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story

Security maintenance in 5 minutes – Morbark E1 customer story

Summary of security issues i World & E1

Local implementation partners

How SYSTIME can help

Page 22: Improve your JD Edwards audit (and your business) with the right security model

Title

Security issues

Associated

& Hidden

Programs

SoD

Multiple

Roles

Mainten

-ance

Solution

Explorer

Repetition

Volume

35,000

objects

AuditingSequence

Manager

New security in minutes

Changes in minutes

Reduces errors

Simplifies audits

Page 23: Improve your JD Edwards audit (and your business) with the right security model

Title

World Security: Top 10 Issues

Access

Control

Function

Keys

Menu

Security

Hidden

Selection 36

Low Level

Commands

Program

Security

Data

Security

Action

Codes

Users

v Groups

Segregation

of Duties

- Resolved

Page 24: Improve your JD Edwards audit (and your business) with the right security model

Title

Agenda

Improve your World audit – The Shaw Group customer story

Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story

Security maintenance in 5 minutes – Morbark E1 customer story

Summary of security issues i World & E1

Local implementation partners

How SYSTIME can help

Page 25: Improve your JD Edwards audit (and your business) with the right security model

Title

Local implementation partners

Page 26: Improve your JD Edwards audit (and your business) with the right security model

Title

Agenda

Improve your World audit – The Shaw Group customer story

Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story

Security maintenance in 5 minutes – Morbark E1 customer story

Summary of security issues i World & E1

Local implementation partners

How SYSTIME can help

Page 27: Improve your JD Edwards audit (and your business) with the right security model

Title

Insert SYSTIME slides here

Page 28: Improve your JD Edwards audit (and your business) with the right security model

Title

Q&A