SlideShare a Scribd company logo
1 of 37
1
Risk Management in Role-based Applications
Segregation of Duties in Oracle
Problem agenda
Introduction
P2P Issues that Impact the Bottom-Line
Oracle Advanced Controls Solution
Use Case: Financial Organization Systems
Q & A
3
Harish Sharma, Senior Consultant
Over 7 years of experience in ERP Implementation, Security and
GRC Design
Problem agenda
Introduction
P2P Issues that Impact the Bottom-Line
Oracle Advanced Controls Solution
Use Case: Financial Organization Systems
Q & A
What Do We Mean by Control ‘Issues’
5
The processes that ensure:
Efficient and effective operations
Reliable and accurate reporting
Fraud resistant operation
Internal
External
Regulatory compliant
Common Issues: Duplicate Vendors in Master Vendor
File
6
 Duplicate payments
 The invoice is submitted for entry twice
 Different options for receipt and payment of invoices, including outsourcing.
 Data entry errors
 Manual checks requests
 Correspondence issues
 Supplier is using a different site/location.
 Duplicate Name problem with Supplier conversion
 Internal control issue
 Controls Inappropriately configured
 Controls are not regularly overridden
 AP processors take shortcuts when creating vendor entries
 Misreading a number or letter (for example: 0 instead of O, or 5 instead of S).
 Transposing numbers (for example: 56 instead of 65)
 Mis-keying (or simply omitting) punctuation (such as hyphens and slashes)
 Omitting leading or trailing zeroes
 Segregation of duties concern
 Standardization and normalization are crucial
 Preventing creating new ones
 Identifying existing duplicate ones
 Rigid coding standards
Problem agenda
Introduction
P2P Issues that Impact the Bottom-Line
Oracle Advanced Controls Solution
Use Case: Financial Organization Systems
Q & A
Advanced Controls
8
Layer of automated controls over ERP controls
Continuously monitor key controls
Detect and Report issues as they occur
Prevent issues from occurring
Quickly see high risk issues with exception based
dashboards
Address issues that affect the bottom line
Reduces operational risk and process effectiveness
9
10Copyright © Capgemini 2013. ll Rights Reserved
10
12Copyright © Capgemini 2013. ll Rights Reserved
Continuous Monitor – Duplicate Vendor
Incident Management
Control Definition
Preventive Measure
Preventive Measure Cont..
19Copyright © Capgemini 2013. ll Rights Reserved
20Copyright © Capgemini 2013. ll Rights Reserved
Problem agenda
Introduction
P2P Issues that Impact the Bottom-Line
Oracle Advanced Controls Solution
Use Case: Financial Organization Systems
Q & A
22
Oracle Advanced Controls –
Customer Experience
24
25
26
Use Case - Scope 27
Security Infrastructure
28
approach to GRC Projects
29
Implementation Approach30
31
Tangible Business Benefits32
Fewer duplicate payments: Vendor master cleanup eliminates the duplicate vendor files and vendor
coding issues that significantly contribute to duplicate payments.
Reduced fraud: The Association of Certified Fraud Examiners estimates that the average company loses 5
percent of its annual revenues to fraud. Cleaning and maintaining a vendor master file provides the visibility
and controls required to help reduce fraudulent payments.
Increased staff productivity: Clean vendor files make it easier to find vendors in your system. This makes
it less likely that staff will create a duplicate vendor record, and ensures that staff does not waste their time
maintaining files that should have been deleted.
Improved analysis and management of spending: By showing which vendors are parts of the same
corporate entity, vendor master cleanup helps companies analyze and manage spending to negotiate
better discount terms and proactively manage their debit balances.
Streamlined regulatory compliance: Vendor master data management drives compliance with regulations
and internal controls, as well as compliance with 1099 tax legislation.
Reduced costs: Compared to traditional manual processes, an ongoing vendor master data maintenance
program significantly reduces the costs of managing supplier information.
33
Thanking You
Q & A
35
36
37

More Related Content

What's hot

Using oracle grc software to automate and proactively monitor your e business...
Using oracle grc software to automate and proactively monitor your e business...Using oracle grc software to automate and proactively monitor your e business...
Using oracle grc software to automate and proactively monitor your e business...bradleywstorts
 
Audit software highlights
Audit software highlightsAudit software highlights
Audit software highlightssonisjs
 
Compliance Management | Compliance Solutions
Compliance Management | Compliance SolutionsCompliance Management | Compliance Solutions
Compliance Management | Compliance SolutionsCorporater
 
Collaborate_VPASession_CSC_GRC_FINAL v2
Collaborate_VPASession_CSC_GRC_FINAL v2Collaborate_VPASession_CSC_GRC_FINAL v2
Collaborate_VPASession_CSC_GRC_FINAL v2Sam Monarch
 
AutoRek - Automated Reconciliation and Exception Management
AutoRek - Automated Reconciliation and Exception ManagementAutoRek - Automated Reconciliation and Exception Management
AutoRek - Automated Reconciliation and Exception ManagementJim Muir
 
AI-based Contract Management for Healthcare
AI-based Contract Management for HealthcareAI-based Contract Management for Healthcare
AI-based Contract Management for HealthcareAavenir
 
Pay Now or Pay Later - 12/2018
Pay Now or Pay Later - 12/2018Pay Now or Pay Later - 12/2018
Pay Now or Pay Later - 12/2018browzcompliance
 
Pay Now or Pay Later: The Case for Investing in Contractor Qualification & Ma...
Pay Now or Pay Later: The Case for Investing in Contractor Qualification & Ma...Pay Now or Pay Later: The Case for Investing in Contractor Qualification & Ma...
Pay Now or Pay Later: The Case for Investing in Contractor Qualification & Ma...browzcompliance
 
Less Risk - That would be NICE. Consumer Compliance in the Age of CFPB
Less Risk - That would be NICE. Consumer Compliance in the Age of CFPBLess Risk - That would be NICE. Consumer Compliance in the Age of CFPB
Less Risk - That would be NICE. Consumer Compliance in the Age of CFPBNICE
 
Continuous auditing
Continuous auditingContinuous auditing
Continuous auditingacc626tan
 
Fulcrum way webinar top 10 advanced control to improve bottomline oct 22 2013
Fulcrum way webinar top 10 advanced control to improve bottomline oct 22 2013Fulcrum way webinar top 10 advanced control to improve bottomline oct 22 2013
Fulcrum way webinar top 10 advanced control to improve bottomline oct 22 2013actjax
 
Optimizing order to-cash (e-business suite) with GRC Advanced Controls
Optimizing order to-cash (e-business suite) with GRC Advanced ControlsOptimizing order to-cash (e-business suite) with GRC Advanced Controls
Optimizing order to-cash (e-business suite) with GRC Advanced ControlsOracle
 
SAP Governance,Risk and Compliance
SAP Governance,Risk and ComplianceSAP Governance,Risk and Compliance
SAP Governance,Risk and ComplianceTLI GrowthSession
 
GRC Essentials for Customers using SAP
GRC Essentials for Customers using SAP GRC Essentials for Customers using SAP
GRC Essentials for Customers using SAP Dudley Cartwright
 

What's hot (19)

GRC Fundamentals
GRC FundamentalsGRC Fundamentals
GRC Fundamentals
 
Using oracle grc software to automate and proactively monitor your e business...
Using oracle grc software to automate and proactively monitor your e business...Using oracle grc software to automate and proactively monitor your e business...
Using oracle grc software to automate and proactively monitor your e business...
 
Audit software highlights
Audit software highlightsAudit software highlights
Audit software highlights
 
Compliance Management | Compliance Solutions
Compliance Management | Compliance SolutionsCompliance Management | Compliance Solutions
Compliance Management | Compliance Solutions
 
Collaborate_VPASession_CSC_GRC_FINAL v2
Collaborate_VPASession_CSC_GRC_FINAL v2Collaborate_VPASession_CSC_GRC_FINAL v2
Collaborate_VPASession_CSC_GRC_FINAL v2
 
AutoRek - Automated Reconciliation and Exception Management
AutoRek - Automated Reconciliation and Exception ManagementAutoRek - Automated Reconciliation and Exception Management
AutoRek - Automated Reconciliation and Exception Management
 
AI-based Contract Management for Healthcare
AI-based Contract Management for HealthcareAI-based Contract Management for Healthcare
AI-based Contract Management for Healthcare
 
Pay Now or Pay Later - 12/2018
Pay Now or Pay Later - 12/2018Pay Now or Pay Later - 12/2018
Pay Now or Pay Later - 12/2018
 
Pay Now or Pay Later: The Case for Investing in Contractor Qualification & Ma...
Pay Now or Pay Later: The Case for Investing in Contractor Qualification & Ma...Pay Now or Pay Later: The Case for Investing in Contractor Qualification & Ma...
Pay Now or Pay Later: The Case for Investing in Contractor Qualification & Ma...
 
Diri 6262013
Diri 6262013Diri 6262013
Diri 6262013
 
Less Risk - That would be NICE. Consumer Compliance in the Age of CFPB
Less Risk - That would be NICE. Consumer Compliance in the Age of CFPBLess Risk - That would be NICE. Consumer Compliance in the Age of CFPB
Less Risk - That would be NICE. Consumer Compliance in the Age of CFPB
 
Continuous auditing
Continuous auditingContinuous auditing
Continuous auditing
 
Profit Recovery Service - Soft Collections
Profit Recovery Service - Soft CollectionsProfit Recovery Service - Soft Collections
Profit Recovery Service - Soft Collections
 
MIS
MISMIS
MIS
 
Fulcrum way webinar top 10 advanced control to improve bottomline oct 22 2013
Fulcrum way webinar top 10 advanced control to improve bottomline oct 22 2013Fulcrum way webinar top 10 advanced control to improve bottomline oct 22 2013
Fulcrum way webinar top 10 advanced control to improve bottomline oct 22 2013
 
Optimizing order to-cash (e-business suite) with GRC Advanced Controls
Optimizing order to-cash (e-business suite) with GRC Advanced ControlsOptimizing order to-cash (e-business suite) with GRC Advanced Controls
Optimizing order to-cash (e-business suite) with GRC Advanced Controls
 
iBMACS Brochure
iBMACS BrochureiBMACS Brochure
iBMACS Brochure
 
SAP Governance,Risk and Compliance
SAP Governance,Risk and ComplianceSAP Governance,Risk and Compliance
SAP Governance,Risk and Compliance
 
GRC Essentials for Customers using SAP
GRC Essentials for Customers using SAP GRC Essentials for Customers using SAP
GRC Essentials for Customers using SAP
 

Similar to Oracle Systems & Control for Financial Org.

Top 10 P2P Advanced Controls to improve your bottom line!
Top 10 P2P Advanced Controls to improve your bottom line!Top 10 P2P Advanced Controls to improve your bottom line!
Top 10 P2P Advanced Controls to improve your bottom line!Oracle
 
CFO.Com and Oracle - Improving Bottom Line with Advanced Controls
CFO.Com and Oracle - Improving Bottom Line with Advanced ControlsCFO.Com and Oracle - Improving Bottom Line with Advanced Controls
CFO.Com and Oracle - Improving Bottom Line with Advanced ControlsOracle
 
FulcrumWay GRC Solutions
FulcrumWay GRC SolutionsFulcrumWay GRC Solutions
FulcrumWay GRC SolutionsMantala
 
Driving efficiency with invoice processing in complex business environments -...
Driving efficiency with invoice processing in complex business environments -...Driving efficiency with invoice processing in complex business environments -...
Driving efficiency with invoice processing in complex business environments -...Global Business Intelligence
 
Customer Process & Decision Transformations
Customer Process & Decision TransformationsCustomer Process & Decision Transformations
Customer Process & Decision TransformationsProlifics
 
Creating the Case for Enterprise Quality
Creating the Case for Enterprise QualityCreating the Case for Enterprise Quality
Creating the Case for Enterprise QualitySparta Systems
 
Thousands of Hours Saved and Risk Reduced for EBS Upgrades & Implementations
Thousands of Hours Saved and Risk Reduced for EBS Upgrades & ImplementationsThousands of Hours Saved and Risk Reduced for EBS Upgrades & Implementations
Thousands of Hours Saved and Risk Reduced for EBS Upgrades & ImplementationsOracle
 
SmartERP Cannon Webinar_2017_Oracle OpenWorld
SmartERP Cannon Webinar_2017_Oracle OpenWorldSmartERP Cannon Webinar_2017_Oracle OpenWorld
SmartERP Cannon Webinar_2017_Oracle OpenWorldSmart ERP Solutions, Inc.
 
Review the five signs that you need a new Segregation of Duties compliance st...
Review the five signs that you need a new Segregation of Duties compliance st...Review the five signs that you need a new Segregation of Duties compliance st...
Review the five signs that you need a new Segregation of Duties compliance st...Symmetry™
 
Integrated Receivables: 5 Critical Factors For Adoption
Integrated Receivables: 5 Critical Factors For AdoptionIntegrated Receivables: 5 Critical Factors For Adoption
Integrated Receivables: 5 Critical Factors For Adoption3 Point Alliance
 
10TH ANNUAL CFO ​LEADERSHIP CONFERENCE: Achieving “Touchless” AP Automation
10TH ANNUAL CFO ​LEADERSHIP CONFERENCE: Achieving “Touchless” AP Automation10TH ANNUAL CFO ​LEADERSHIP CONFERENCE: Achieving “Touchless” AP Automation
10TH ANNUAL CFO ​LEADERSHIP CONFERENCE: Achieving “Touchless” AP AutomationAuxis Consulting & Outsourcing
 
"Making Accounts Receivable Automation Work for You" Webinar Slide Deck
"Making Accounts Receivable Automation Work for You" Webinar Slide Deck"Making Accounts Receivable Automation Work for You" Webinar Slide Deck
"Making Accounts Receivable Automation Work for You" Webinar Slide DeckJean-Pierre Foehn
 
Best Practices for the Service Cloud
Best Practices for the Service CloudBest Practices for the Service Cloud
Best Practices for the Service CloudRoss Bauer
 
How to Get Proactive about your Vendor Master Data: 4 tips for success
How to Get Proactive about your Vendor Master Data: 4 tips for successHow to Get Proactive about your Vendor Master Data: 4 tips for success
How to Get Proactive about your Vendor Master Data: 4 tips for successSarah Fane
 
David Caruso Keynote Address
David Caruso Keynote AddressDavid Caruso Keynote Address
David Caruso Keynote AddressNathaniel Palmer
 
ERP SYSTEM POST IMPLEMENTATION AUDIT_TRNG_May,2023 - Part-4.pptx
ERP SYSTEM POST IMPLEMENTATION AUDIT_TRNG_May,2023 - Part-4.pptxERP SYSTEM POST IMPLEMENTATION AUDIT_TRNG_May,2023 - Part-4.pptx
ERP SYSTEM POST IMPLEMENTATION AUDIT_TRNG_May,2023 - Part-4.pptxRamanaBulusu1
 
ETHICS FRAUD AND INTERNAL CONTROL AND AUDITING COMPUTERIZED FINANCIAL SYSSTEM...
ETHICS FRAUD AND INTERNAL CONTROL AND AUDITING COMPUTERIZED FINANCIAL SYSSTEM...ETHICS FRAUD AND INTERNAL CONTROL AND AUDITING COMPUTERIZED FINANCIAL SYSSTEM...
ETHICS FRAUD AND INTERNAL CONTROL AND AUDITING COMPUTERIZED FINANCIAL SYSSTEM...PascalOtieno
 

Similar to Oracle Systems & Control for Financial Org. (20)

Top 10 P2P Advanced Controls to improve your bottom line!
Top 10 P2P Advanced Controls to improve your bottom line!Top 10 P2P Advanced Controls to improve your bottom line!
Top 10 P2P Advanced Controls to improve your bottom line!
 
Oow2014 nk 2
Oow2014 nk 2Oow2014 nk 2
Oow2014 nk 2
 
CFO.Com and Oracle - Improving Bottom Line with Advanced Controls
CFO.Com and Oracle - Improving Bottom Line with Advanced ControlsCFO.Com and Oracle - Improving Bottom Line with Advanced Controls
CFO.Com and Oracle - Improving Bottom Line with Advanced Controls
 
FulcrumWay GRC Solutions
FulcrumWay GRC SolutionsFulcrumWay GRC Solutions
FulcrumWay GRC Solutions
 
Driving efficiency with invoice processing in complex business environments -...
Driving efficiency with invoice processing in complex business environments -...Driving efficiency with invoice processing in complex business environments -...
Driving efficiency with invoice processing in complex business environments -...
 
Customer Process & Decision Transformations
Customer Process & Decision TransformationsCustomer Process & Decision Transformations
Customer Process & Decision Transformations
 
Creating the Case for Enterprise Quality
Creating the Case for Enterprise QualityCreating the Case for Enterprise Quality
Creating the Case for Enterprise Quality
 
Thousands of Hours Saved and Risk Reduced for EBS Upgrades & Implementations
Thousands of Hours Saved and Risk Reduced for EBS Upgrades & ImplementationsThousands of Hours Saved and Risk Reduced for EBS Upgrades & Implementations
Thousands of Hours Saved and Risk Reduced for EBS Upgrades & Implementations
 
SmartERP Cannon Webinar_2017_Oracle OpenWorld
SmartERP Cannon Webinar_2017_Oracle OpenWorldSmartERP Cannon Webinar_2017_Oracle OpenWorld
SmartERP Cannon Webinar_2017_Oracle OpenWorld
 
Review the five signs that you need a new Segregation of Duties compliance st...
Review the five signs that you need a new Segregation of Duties compliance st...Review the five signs that you need a new Segregation of Duties compliance st...
Review the five signs that you need a new Segregation of Duties compliance st...
 
Integrated Receivables: 5 Critical Factors For Adoption
Integrated Receivables: 5 Critical Factors For AdoptionIntegrated Receivables: 5 Critical Factors For Adoption
Integrated Receivables: 5 Critical Factors For Adoption
 
SAP grc
SAP grc SAP grc
SAP grc
 
10TH ANNUAL CFO ​LEADERSHIP CONFERENCE: Achieving “Touchless” AP Automation
10TH ANNUAL CFO ​LEADERSHIP CONFERENCE: Achieving “Touchless” AP Automation10TH ANNUAL CFO ​LEADERSHIP CONFERENCE: Achieving “Touchless” AP Automation
10TH ANNUAL CFO ​LEADERSHIP CONFERENCE: Achieving “Touchless” AP Automation
 
"Making Accounts Receivable Automation Work for You" Webinar Slide Deck
"Making Accounts Receivable Automation Work for You" Webinar Slide Deck"Making Accounts Receivable Automation Work for You" Webinar Slide Deck
"Making Accounts Receivable Automation Work for You" Webinar Slide Deck
 
Delivering value with bpm
Delivering value with bpmDelivering value with bpm
Delivering value with bpm
 
Best Practices for the Service Cloud
Best Practices for the Service CloudBest Practices for the Service Cloud
Best Practices for the Service Cloud
 
How to Get Proactive about your Vendor Master Data: 4 tips for success
How to Get Proactive about your Vendor Master Data: 4 tips for successHow to Get Proactive about your Vendor Master Data: 4 tips for success
How to Get Proactive about your Vendor Master Data: 4 tips for success
 
David Caruso Keynote Address
David Caruso Keynote AddressDavid Caruso Keynote Address
David Caruso Keynote Address
 
ERP SYSTEM POST IMPLEMENTATION AUDIT_TRNG_May,2023 - Part-4.pptx
ERP SYSTEM POST IMPLEMENTATION AUDIT_TRNG_May,2023 - Part-4.pptxERP SYSTEM POST IMPLEMENTATION AUDIT_TRNG_May,2023 - Part-4.pptx
ERP SYSTEM POST IMPLEMENTATION AUDIT_TRNG_May,2023 - Part-4.pptx
 
ETHICS FRAUD AND INTERNAL CONTROL AND AUDITING COMPUTERIZED FINANCIAL SYSSTEM...
ETHICS FRAUD AND INTERNAL CONTROL AND AUDITING COMPUTERIZED FINANCIAL SYSSTEM...ETHICS FRAUD AND INTERNAL CONTROL AND AUDITING COMPUTERIZED FINANCIAL SYSSTEM...
ETHICS FRAUD AND INTERNAL CONTROL AND AUDITING COMPUTERIZED FINANCIAL SYSSTEM...
 

Oracle Systems & Control for Financial Org.

  • 1. 1 Risk Management in Role-based Applications Segregation of Duties in Oracle
  • 2. Problem agenda Introduction P2P Issues that Impact the Bottom-Line Oracle Advanced Controls Solution Use Case: Financial Organization Systems Q & A
  • 3. 3 Harish Sharma, Senior Consultant Over 7 years of experience in ERP Implementation, Security and GRC Design
  • 4. Problem agenda Introduction P2P Issues that Impact the Bottom-Line Oracle Advanced Controls Solution Use Case: Financial Organization Systems Q & A
  • 5. What Do We Mean by Control ‘Issues’ 5 The processes that ensure: Efficient and effective operations Reliable and accurate reporting Fraud resistant operation Internal External Regulatory compliant
  • 6. Common Issues: Duplicate Vendors in Master Vendor File 6  Duplicate payments  The invoice is submitted for entry twice  Different options for receipt and payment of invoices, including outsourcing.  Data entry errors  Manual checks requests  Correspondence issues  Supplier is using a different site/location.  Duplicate Name problem with Supplier conversion  Internal control issue  Controls Inappropriately configured  Controls are not regularly overridden  AP processors take shortcuts when creating vendor entries  Misreading a number or letter (for example: 0 instead of O, or 5 instead of S).  Transposing numbers (for example: 56 instead of 65)  Mis-keying (or simply omitting) punctuation (such as hyphens and slashes)  Omitting leading or trailing zeroes  Segregation of duties concern  Standardization and normalization are crucial  Preventing creating new ones  Identifying existing duplicate ones  Rigid coding standards
  • 7. Problem agenda Introduction P2P Issues that Impact the Bottom-Line Oracle Advanced Controls Solution Use Case: Financial Organization Systems Q & A
  • 8. Advanced Controls 8 Layer of automated controls over ERP controls Continuously monitor key controls Detect and Report issues as they occur Prevent issues from occurring Quickly see high risk issues with exception based dashboards Address issues that affect the bottom line Reduces operational risk and process effectiveness
  • 9. 9
  • 10. 10Copyright © Capgemini 2013. ll Rights Reserved 10
  • 11.
  • 12. 12Copyright © Capgemini 2013. ll Rights Reserved
  • 13.
  • 14. Continuous Monitor – Duplicate Vendor
  • 19. 19Copyright © Capgemini 2013. ll Rights Reserved
  • 20. 20Copyright © Capgemini 2013. ll Rights Reserved
  • 21. Problem agenda Introduction P2P Issues that Impact the Bottom-Line Oracle Advanced Controls Solution Use Case: Financial Organization Systems Q & A
  • 22. 22 Oracle Advanced Controls – Customer Experience
  • 23.
  • 24. 24
  • 25. 25
  • 26. 26
  • 27. Use Case - Scope 27
  • 29. approach to GRC Projects 29
  • 31. 31
  • 32. Tangible Business Benefits32 Fewer duplicate payments: Vendor master cleanup eliminates the duplicate vendor files and vendor coding issues that significantly contribute to duplicate payments. Reduced fraud: The Association of Certified Fraud Examiners estimates that the average company loses 5 percent of its annual revenues to fraud. Cleaning and maintaining a vendor master file provides the visibility and controls required to help reduce fraudulent payments. Increased staff productivity: Clean vendor files make it easier to find vendors in your system. This makes it less likely that staff will create a duplicate vendor record, and ensures that staff does not waste their time maintaining files that should have been deleted. Improved analysis and management of spending: By showing which vendors are parts of the same corporate entity, vendor master cleanup helps companies analyze and manage spending to negotiate better discount terms and proactively manage their debit balances. Streamlined regulatory compliance: Vendor master data management drives compliance with regulations and internal controls, as well as compliance with 1099 tax legislation. Reduced costs: Compared to traditional manual processes, an ongoing vendor master data maintenance program significantly reduces the costs of managing supplier information.
  • 34. Q & A
  • 35. 35
  • 36. 36
  • 37. 37