CS*Comply
is a
class
leading
solution
for
implementing
your
Segregation
of
Duties
internal
control
policies.
CS*Comply
helps
ensure
that the
risks
associated
with
inappropriate
access
are
mitigated
without
delay.
Good
tool
selection
is key
to
ensuring
your
organization
complies
with
regulatory
requirements
and
corporate
security.
For all
your
Oracle
E-Business
Suite
related
SOD
issues,
CS*Comply
is the
tool of
choice.
Simple and Fully
Integrated
CS*Comply is
simplicity itself;
enable the conflict
rules appropriate
for your
organization and
CS*Comply does the
rest, all directly
from within Oracle
E-Business Suite.
There is no need to
use a tool that is
external to Oracle
since CS*Comply is
available directly
from the users
standard navigator
menu. The entire
toolkit is
administered within
its own
responsibility and
has a native look
and feel to make
users feel right at
home.
Low Cost and Feature
Rich
CS*Comply is a
feature rich toolkit
that includes many
features that make
it one of the most
powerful SOD tools
available for the
Oracle E-Business
Suite. From the
Preventive and
Detective conflict
modes, to the
Notification and
Rank based Alert
system to the brute
force approach of
AccessGuard to the
world's fastest
Conflict Scanning
Engine. CS*Comply is
best of breed
without the price
tag.
The Detective
With
CS*Comply you can
scan your system in
detective mode. This
will report on any
violations thus
allowing you to
begin your
remediation process.
Several interactive
screens and reports
are included with
CS*Comply to enable
you to work with
violations by User,
Responsibility,
Function and Rule.
Full details of each
violation are made
available including
all menu names and
the full menu path.
The
Enforcer/Prevention
The
real power of
CS*Comply comes into
play as the enforcer
of your SOD internal
controls. When run
in Preventive mode
all violations will
be prevented from
occurring in
real-time. This
ensures that your
data is fully
protected even
before you begin
your remediation.
When a user attempts
to access a
conflicting
function, CS*Comply
will deny access and
give the user
opportunity to
request access at
that time.
Lightening Fast
Conflict Scanning
Engine
CS*Comply
incorporates one of
the fastest Conflict
Scanning Engines
available. A common
problem with many
SOD solutions is the
sheer size of the
problem they are
trying to address.
In large
implementations with
hundreds or
thousands of users
and hundreds of
thousands or even
millions of possible
access combinations,
scanning through
this mountain of
data can take a very
long time, therefore
many alternative
solutions have to
work from baseline
or snapshot
positions of the
system or else work
from an inadequate
conflict matrix.
This is not the case
with CS*Comply, the
Conflict Scanning
Engine can find all
violations on a
system with 1000
users and more than
250,000 access
combinations against
a conflict matrix of
more than 20,000
entries without
running any snapshot
or baseline
processes in just a
matter of minutes.
Access Requests and
User Exception
There
will be occasions
when a user
identified as being
in violation of a
particular SOD
control will
actually require
access. In this
scenario the
built-in Access
Request system will
ensure the approval
or denial process is
as efficient as
possible. The user
requiring access
will attempt to use
a protected function
at which point
CS*Comply will
automatically deny
access, the user can
then request access,
this will trigger a
new Access Request
and the appropriate
authorisers will be
notified of the
request. They can
then use CS*Comply
to either approve or
decline
authorisation. They
could give temporary
approval that will
automatically expire
once the end date is
reached. In all
cases, notifications
are sent to the
approvers and the
users requesting
access.
Rank Based Alert
System
Each
conflict rule can be
assigned a rank,
which can be used to
denote the level of
risk associated with
the rule. Against
the rank you can
assign one or more
notification groups
and each of these
can have one or more
members. When a User
Exception is created
or Access Request
approved, all
members of the
associated
notification group
will be alerted.
This helps ensure
visibility of all
exceptions and
Access Requests.
Features at a Glance
Very fast
Conflict
Scanning Engine
100% integrated
into Oracle
E-Business Suite
Preventive
conflict mode
Detective
conflict mode
Access Request
system
Notification
System
Rank based Alert
system
Violation
processing by
user,
responsibility
and rule
Several
interactive
violation
inquiry screens
Setup and
violation
reports
AccessGuard for
brute force
access control
Entity based
function
grouping
Class driven
conflict matrix
System dashboard
Multiple
approvers
User Exception
system
XML support for
export/importing
CS*Comply data
User friendly
Simple to
install
Integrated with
CS*Applications
Enterprise Pack
(E*Pack) for
CS*Comply
We
have team up with
ERP Seminars
to bring you the
most comprehensive
Conflict Matrix on
the market.
CS*Comply*EP
delivers over 21,000
known and documented
conflict paired.
More information is
available on the
CaoSys website.