improve your jd edwards audit (and your business) with the right security model
DESCRIPTION
Presenter: Steve Spencer, Q SoftwareTRANSCRIPT
Title
Steve Spencer
Improve your JD Edwards audit (and your business) with the right security model
Title
Agenda
Improve your World audit – The Shaw Group customer story
Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story
Security maintenance in 5 minutes – Morbark E1 customer story
Summary of security issues i World & E1
Local implementation partners
How SYSTIME can help
Title
Leading global provider of:
– Engineering Procurement
– Construction Technology
– Maintenance Fabrication
– Manufacturing Consulting
– Remediation Facilities Management
To:
– Government
– Private Sector
– US Nuclear Sector
Operations:
– 22,000 employees
Title
The Need– Make security more manageable– Make compliance more sustainable– Reduce the cost & effort involved– Implement tighter SoD controls– Become compliant / pass the next audit
Title
Customer Case Study: The Benefits
Significant reduction in security management effort
– Set up a new user in 5 minutes
– Add security for new country – 20 minutes!
Reduction in audit costs
– Both internal & external auditors “love it”
– Easy to test, prove & report on compliance
Easy to identify potential SoD violations
Easy to report on roles
– Set-up
– Security
– Assignments
– Audit trail of assignments / adoption
Passed the 2006, 2007 & 2008 audits
– “as different as night and day”
– “This is the best security set up we have ever seen”
Title
The customer’s and auditor’s feedback
“We could not have achieved this without QSoftware’s SEC-Qure World integrated security
compliance solutions.”
“This is the best security we have ever seen.”
Title
Agenda
Improve your World audit – The Shaw Group customer story
Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story
Security maintenance in 5 minutes – Morbark E1 customer story
Summary of security issues i World & E1
Local implementation partners
How SYSTIME can help
Title
Bibby Background
UKs leading independent logistics company
Part of Bibby Line Group– Over 200 years old– HQ in Liverpool– Group revenue $1.7 bn
Bibby Distribution– Revenue $310 m – 70 locations in UK– 2m sq ft warehousing– 2,300 employees– 800 vehicles
Title
Background
Bibby Distribution has been growing– Over the last 10 years
• Growth of 300%
– Organically• New depots / New contracts
– By acquisition• 8 businesses acquired• HLG was 30% of current revenue
Title
Why EnterpriseOne?
More capability than just accounts
Distribution-specific functionality
More flexible
More scalable
Long-term solution
Title
The set-up
JD Edwards EnterpriseOne 8,12 Tools 8.97 45 – 50 users at Head Office
– Sales Ledger– Purchase Ledger– General Ledger– Sales Order Processing– Fixed assets – very complex– Procurement
500 users across the depots– Procurement– Sales Order Processing– etc
Title
Implementation challenges
Tight timescales– Wanted go-live before next year-end
All new technology
No Oracle expertise
Complex requirements & structure– HO, Depots, relationship of depots to customers
Title
Why security was important
Very complex depot relationships– 1:1, 1:Many, Many:1 relationships– Segregation of duties– Time / effort / costs to resolve– Audit
Had to perform substantive audits– Compliance audits not possible– Time-consuming (costly)
Title
Why Bibby chose Q Software
Oracle advised E1 security would take 6-9 months
– Too long for project roll-out deadlines
– So went All Doors Open trying menu security
– Menu security = No security
Q Software’s SEC-Qure E1Config
– Simplified All Doors Open All Doors Closed
• Reducing effort by 80%
– Enabled enforcement of SoD
• Enhancing compliance
– Reduces security maintenance effort
• By about 50%
– Minimises potential for errors
• Fewer posting errors
– Reduces reporting time & accuracy
• From days to minutes
– Quick & easy to prove security controls
• Reduces auditing effort
Q Software very responsive– Excellent training, advice, consultancy and support
Cut
Title
Benefits Assisted by Q Software
Year end process went smoothly
– Still smiling, fewer sick days
Month end processes much quicker
– More time available to manage rather than just do accounting
Easy to set up temp role changes i.e. For holidays
– No need for temp staff, security assured
New contracts set up much quicker
– New customers up and running sooner
Few posting errors
– As staff program / data access controlled correctly
Much simpler & smoother audits
– Auditors happy with first security audit
– Just passed 2nd audit – no issues at all
Q Software helped reduce costs and increase revenues
Title
Bibby Distribution
“Q Software implemented security in a fraction of the time that Oracle had estimated”.
“Q Software contributes to significant cost savings throughout our business.”
Title
Agenda
Improve your World audit – The Shaw Group customer story
Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story
Security maintenance in 5 minutes – Morbark E1 customer story
Summary of security issues i World & E1
Local implementation partners
How SYSTIME can help
Title
Security maintenance in 5 minutes
Title
The problem
Small work-force
– Frequent need to change duties
• Short notice
Security time-consuming to manage
– Frequent interruptions to IT staff
Increased risk of high cost errors
– Due to unfamiliarity with new role
Title
The Solution
SEC-Qure® Config
– Capture existing security
– Test for conflicts
– Manage SoD
– Simplify on-going security maintenance
SEC-Qure® SoD
– SoD model management
– SoD violations reporting
Title
Agenda
Improve your World audit – The Shaw Group customer story
Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story
Security maintenance in 5 minutes – Morbark E1 customer story
Summary of security issues i World & E1
Local implementation partners
How SYSTIME can help
Title
Security issues
Associated
& Hidden
Programs
SoD
Multiple
Roles
Mainten
-ance
Solution
Explorer
Repetition
Volume
35,000
objects
AuditingSequence
Manager
New security in minutes
Changes in minutes
Reduces errors
Simplifies audits
Title
World Security: Top 10 Issues
Access
Control
Function
Keys
Menu
Security
Hidden
Selection 36
Low Level
Commands
Program
Security
Data
Security
Action
Codes
Users
v Groups
Segregation
of Duties
- Resolved
Title
Agenda
Improve your World audit – The Shaw Group customer story
Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story
Security maintenance in 5 minutes – Morbark E1 customer story
Summary of security issues i World & E1
Local implementation partners
How SYSTIME can help
Title
Local implementation partners
Title
Agenda
Improve your World audit – The Shaw Group customer story
Delivering the goods SEC-Qurely - Bibby Distribution E1 customer story
Security maintenance in 5 minutes – Morbark E1 customer story
Summary of security issues i World & E1
Local implementation partners
How SYSTIME can help
Title
Insert SYSTIME slides here
Title
Q&A