Platform Specific Controls

Oracle EBS

Oracle provides Enterprise Resource Planning (ERP) business applications that tightly integrate business processes organization wide in their E-Business Suite (EBS). ERP business applications are the cornerstone for any organization. An organization’s most critical business cycles and most sensitive data are most often managed by an ERP and as such the risk inherent in these applications is critical and must be controlled effectively.

The following Oracle EBS related controls are organized by Control Type. You can also “Jump To” other Control Types and Categories by clicking on the link located at the right of this screen.

The following are links to more detailed pages:

Configuration controls

Showing 3 controls:
Control TitleControl TypeRisk Rating
Monitor configuration tables being audited Configuration controlsHigh
Monitor GL Journal Sources Configuration controlsHigh
Monitor Users that can modify configuration settings Configuration controlsHigh

Data Controls

Showing 3 controls:
Control TitleControl TypeRisk Rating
Monitor accounts with access to PCI relevant data Data ControlsHigh
Monitor accounts with access to PHI or PII relevant data Data ControlsHigh
Monitor Request Groups with access to sensitive data Data ControlsHigh

Identity Governance

Showing 10 controls:
Control TitleControl TypeRisk Rating
Count of Functions by User Identity GovernanceMedium
Count of Responsibilities by User Identity GovernanceMedium
Database accounts have appropriate access Identity GovernanceHigh
Monitor accounts with no logins and no password changes Identity GovernanceMedium
Monitor all user accounts that have created other User IDs Identity GovernanceMedium
Monitor employees with more than one user account Identity GovernanceHigh
Monitor unlocked stale accounts with no activity for more than 3 months Identity GovernanceMedium
Monitor users with future end-dated responsibilities Identity GovernanceMedium
Monitor users with future end dates Identity GovernanceMedium
Oracle EBS – Govern Access to Critical Roles Identity Governance, IT General Controls, Least PrivilegeHigh

IT General Controls

Showing 20 controls:
Control TitleControl TypeRisk Rating
Brute force attack on the app/DB IT General ControlsHigh
Count of Functions by Responsibility IT General ControlsMedium
Logging of unsuccessful login attempts IT General ControlsHigh
Monitor access of Oracle Forms for under utilization IT General ControlsMedium
Monitor active Responsibilities with menu and function exclusions IT General ControlsLow
Monitor all delivered accounts, generic accounts and super user accounts with recent password changes IT General ControlsHigh
Monitor Audit SYS operations being turned off IT General ControlsHigh
Monitor Audit Trail being turned off IT General ControlsHigh
Monitor authentication configuration updates to the database IT General ControlsHigh
Monitor Database audit being turned off IT General ControlsHigh
Monitor direct database logins to EBS schema database accounts IT General ControlsHigh
Monitor generic user accounts – IDs not associated with an active employee IT General ControlsHigh
Monitor new database accounts created IT General ControlsHigh
Monitor non end-dated Responsibilities not assigned to any user accounts IT General ControlsLow
Monitor Page Access Tracking being turned off IT General ControlsHigh
Monitor Sign-On Audit being turned off IT General ControlsHigh
Monitor unlocked or non end-dated accounts associated with terminated users IT General ControlsHigh
Monitor updates to AOL tables under Audit Trail IT General ControlsHigh
Monitor User SYSADMIN logins IT General ControlsHigh
Restrict DB accounts with no corresponding application account IT General ControlsHigh

Least Privilege

Showing 24 controls:
Control TitleControl TypeRisk Rating
Access Administration – Critical Access Least Privilege, Segregation of DutiesCritical
Create Supplier – Critical Access Least Privilege, Segregation of DutiesHigh
Limit access that creates Segregation of Duties risk Least PrivilegeHigh
Limit access to Alert Manager Least PrivilegeHigh
Limit access to configure Profile Options Least PrivilegeHigh
Limit access to critical Oracle EBS functions Least PrivilegeHigh
Limit access to SQL forms Least PrivilegeHigh
Limit access to User and System Profile Values Form Least PrivilegeHigh
Limit user accounts having access to super-user type functionality Least PrivilegeHigh
Monitor accounts assigned delivered EBS roles or responsibilities Least PrivilegeHigh
Monitor accounts with access to AZN Menus Least PrivilegeHigh
Monitor accounts with access to SOX Critical Functions Least PrivilegeHigh
Monitor accounts with access to Utilities: Diagnostics and Utilities: SQL Trace Least PrivilegeHigh
Monitor of users with access to Order Entry Administrator Least PrivilegeHigh
Monitor read-only Responsibilities with write access Least PrivilegeMedium
Monitor users with access to Approvals Management Administrator Least PrivilegeHigh
Monitor users with access to Cash Management Setup Least PrivilegeHigh
Monitor users with access to Payments Setup Administrator Least PrivilegeHigh
Monitor users with access to Trading Community Architecture Least PrivilegeHigh
Monitor users with access to Workflow Administrator Least PrivilegeHigh
Payables Setup – Critical Access Least Privilege, Segregation of DutiesHigh
Purchasing Setup – Critical Access Least Privilege, Segregation of DutiesHigh
Restrict Users that can develop concurrent programs Least PrivilegeHigh
Restrict Users with access to modify audit and logging Least PrivilegeHigh

Password controls

Showing 3 controls:
Control TitleControl TypeRisk Rating
Monitor accounts with password configuration not consistent with policy Password controlsHigh
Monitor password configuration Password controlsHigh
Password hashing has been implemented on Oracle DBs Password controlsHigh

Segregation of Duties

Showing 199 controls:
Control TitleControl TypeRisk Rating
Approve Invoices conflicts with Create Suppliers Segregation of DutiesHigh
Approve Invoices conflicts with Payables Invoices Segregation of DutiesHigh
Approve Invoices conflicts with Payables Payments Segregation of DutiesHigh
AR Write-off conflicts with Receivables Transactions Segregation of DutiesHigh
Assets Workbench conflicts with Assets Depreciation Segregation of DutiesHigh
Assets Workbench conflicts with Mass Transactions Segregation of DutiesHigh
Assets Workbench conflicts with Physical Inventory Segregation of DutiesMedium
Bank Reconciliations conflicts with Payables Invoices Segregation of DutiesHigh
Bank Reconciliations conflicts with Payables Payments Segregation of DutiesHigh
Bank Reconciliations conflicts with Receivable Receipts Segregation of DutiesMedium
Bank Reconciliations conflicts with Receivables Clear Customer Balances Segregation of DutiesMedium
Benefits Configuration conflicts with Maintain Payroll Configuration Segregation of DutiesHigh
Benefits Configuration conflicts with Process Payroll Segregation of DutiesHigh
Benefits Configuration conflicts with Payroll Maintenance Segregation of DutiesHigh
Create Items conflicts with Cycle Counting Segregation of DutiesMedium
Create Items conflicts with Inventory Transactions Segregation of DutiesMedium
Create Requisition conflicts with Create Items Segregation of DutiesMedium
Create Requisition conflicts with Create Suppliers Segregation of DutiesHigh
Create Requisition conflicts with Enter Purchase Order Release Segregation of DutiesMedium
Create Requisition conflicts with Payables Invoices Segregation of DutiesMedium
Create Requisition conflicts with Payables Payments Segregation of DutiesHigh
Create Requisition conflicts with Purchase Orders Segregation of DutiesMedium
Create Resources conflicts with Enter Enterprise Asset Management Transactions Segregation of DutiesMedium
Create Sales Order conflicts with Inventory Transactions Segregation of DutiesMedium
Create Sales Order conflicts with Receivables Transactions Segregation of DutiesHigh
Create Suppliers conflicts with Approve Invoices Segregation of DutiesHigh
Create Suppliers conflicts with Enter Purchase Order Release Segregation of DutiesMedium
Create Suppliers conflicts with Payables Invoices Segregation of DutiesHigh
Create Suppliers conflicts with Payables Payments Segregation of DutiesHigh
Create Suppliers conflicts with Purchase Orders Segregation of DutiesHigh
Create Suppliers conflicts with Receive Goods and Services Segregation of DutiesMedium
Create Work Order conflicts with Approval Authorization Control Segregation of DutiesMedium
Create Work Order conflicts with Approve Invoice Segregation of DutiesMedium
Create Work Order conflicts with Approve Purchase Order Segregation of DutiesMedium
Create Work Order conflicts with Create Asset Numbers Segregation of DutiesMedium
Create Work Order conflicts with Create Customer Segregation of DutiesMedium
Create Work Order conflicts with Create Items Segregation of DutiesMedium
Create Work Order conflicts with Create Projects Segregation of DutiesMedium
Create Work Order conflicts with Create Purchase Order Segregation of DutiesMedium
Create Work Order conflicts with Create Resources Segregation of DutiesMedium
Create Work Order conflicts with Create Suppliers Segregation of DutiesMedium
Create Work Order conflicts with Cycle Counting Segregation of DutiesMedium
Create Work Order conflicts with Enter Accounts Receivables Invoice Segregation of DutiesMedium
Create Work Order conflicts with Enter Customer Receipts Segregation of DutiesMedium
Create Work Order conflicts with Enter Employee Labor Rates Segregation of DutiesMedium
Create Work Order conflicts with Enter Enterprise Asset Management Transactions Segregation of DutiesMedium
Create Work Order conflicts with Enter Journal Entry Segregation of DutiesMedium
Create Work Order conflicts with Inventory Transactions Segregation of DutiesMedium
Create Work Order conflicts with Payables Payments Segregation of DutiesMedium
Create Work Order conflicts with Payables Invoices Segregation of DutiesMedium
Create Work Order conflicts with Post Journal Entry Segregation of DutiesMedium
Create Work Order conflicts with Print Checks Segregation of DutiesMedium
Create Work Order conflicts with Receive Goods and Services Segregation of DutiesMedium
Create Work Order conflicts with Return Goods and Services Segregation of DutiesMedium
Create Work Order conflicts with Set Up Auto Create Purchase Segregation of DutiesMedium
Create Work Order conflicts with Update Enterprise Asset Management Setup Segregation of DutiesMedium
Customer Account Maintenance conflicts with Create Sales Order Segregation of DutiesHigh
Customer Account Maintenance conflicts with Receivables Credit Memos Segregation of DutiesHigh
Customer Account Maintenance conflicts with Receivables Transactions Segregation of DutiesHigh
Customer Account Maintenance conflicts with Release Sales Order Segregation of DutiesMedium
Customer Account Maintenance conflicts with Remittances Segregation of DutiesMedium
Customer Account Maintenance conflicts with Ship Customer Goods Segregation of DutiesMedium
Cycle Counting conflicts with Purchase Orders Segregation of DutiesMedium
Cycle Counting conflicts with Receive Goods and Services Segregation of DutiesMedium
Delete Receipts conflicts with Ship Customer Goods Segregation of DutiesMedium
Development conflicts with Access Administration Segregation of DutiesHigh
Development conflicts with System Administration Segregation of DutiesHigh
Enter Accounts Receivable Invoice conflicts with Item Price List Segregation of DutiesMedium
Enter Accounts Receivable Invoice conflicts with Ship Customer Goods Segregation of DutiesMedium
Enter Debit Memo conflicts with Release Sales Order Segregation of DutiesMedium
Enter Enterprise Asset Management Transactions conflicts with Create Items Segregation of DutiesMedium
Enter Enterprise Asset Management Transactions conflicts with Cycle Counting Segregation of DutiesMedium
Enter Journal Entry conflicts with Approve Invoices Segregation of DutiesHigh
Enter Journal Entry conflicts with Approve Purchase Orders Segregation of DutiesHigh
Enter Journal Entry conflicts with Assets Depreciation Segregation of DutiesHigh
Enter Journal Entry conflicts with Assets Workbench Segregation of DutiesHigh
Enter Journal Entry conflicts with Create Sales Order Segregation of DutiesHigh
Enter Journal Entry conflicts with Enter Customer Receipts Segregation of DutiesHigh
Enter Journal Entry conflicts with Enter Enterprise Asset Management Transactions Segregation of DutiesHigh
Enter Journal Entry conflicts with General Ledger Set Up Segregation of DutiesHigh
Enter Journal Entry conflicts with Maintain Chart of Accounts Segregation of DutiesHigh
Enter Journal Entry conflicts with Mass Transactions Segregation of DutiesHigh
Enter Journal Entry conflicts with Payables Invoices Segregation of DutiesHigh
Enter Journal Entry conflicts with Payables Payments Segregation of DutiesHigh
Enter Journal Entry conflicts with Physical Inventory Segregation of DutiesHigh
Enter Journal Entry conflicts with Post Journal Entry Segregation of DutiesHigh
Enter Journal Entry conflicts with Purchase Orders Segregation of DutiesHigh
Enter Journal Entry conflicts with Release Sales Order Segregation of DutiesHigh
Enter Journal Entry conflicts with Remittances Segregation of DutiesHigh
Enter Journal Entry conflicts with Ship Customer Goods Segregation of DutiesHigh
Enter Purchase Order Release conflicts with Approval Authorization Control Segregation of DutiesHigh
Enter Purchase Order Release conflicts with Approve Invoices Segregation of DutiesMedium
Enter Purchase Order Release conflicts with Payables Invoices Segregation of DutiesHigh
Enter Purchase Order Release conflicts with Receive Goods and Services Segregation of DutiesHigh
General Ledger Periods conflicts with General Ledger Setup Segregation of DutiesHigh
General Ledger Periods conflicts with Payables Invoices Segregation of DutiesHigh
General Ledger Periods conflicts with Enter Journal Entry Segregation of DutiesHigh
General Ledger Periods conflicts with Maintain Chart of Accounts Segregation of DutiesHigh
General Ledger Periods conflicts with Payables Payments Segregation of DutiesHigh
General Ledger Periods conflicts with Post Journal Entry Segregation of DutiesHigh
General Ledger Periods conflicts with Purchase Orders Segregation of DutiesHigh
General Ledger Periods conflicts with Receivables Receipts Segregation of DutiesHigh
General Ledger Periods conflicts with Receive Goods and Services Segregation of DutiesHigh
General Ledger Setup conflicts with Enter Journal Entry Segregation of DutiesHigh
General Ledger Setup conflicts with Mass Allocate Journal Entries Segregation of DutiesHigh
General Ledger Setup conflicts with Payables Invoices Segregation of DutiesHigh
HR Benefits conflicts with Process Payroll Segregation of DutiesHigh
Inventory Transactions conflicts with Receive Goods and Services Segregation of DutiesMedium
Item Price List conflicts with Enter Customer Receipts Segregation of DutiesHigh
Item Price List conflicts with Release Sales Order Segregation of DutiesHigh
Item Price List conflicts with Remittances Segregation of DutiesHigh
Item Price List conflicts with Ship Customer Goods Segregation of DutiesMedium
Maintain Employee Master Data conflicts with Maintain Payroll Configuration Segregation of DutiesHigh
Maintain Employee Master Data conflicts with Maintain Time Data Segregation of DutiesHigh
Maintain Employee Master Data conflicts with Payroll Maintenance Segregation of DutiesHigh
Maintain Employee Master Data conflicts with Process Payroll Segregation of DutiesHigh
Maintain Employee Position conflicts with Maintain Payroll Configuration Segregation of DutiesHigh
Maintain Employee Position conflicts with Payroll Maintenance Segregation of DutiesHigh
Maintain Employee Position conflicts with Process Payroll Segregation of DutiesHigh
Maintain Payroll Configuration conflicts with Process Payroll Segregation of DutiesHigh
Maintain Time Data conflicts with Maintain Payroll Configuration Segregation of DutiesHigh
Maintain Time Data conflicts with Payroll Maintenance Segregation of DutiesHigh
Maintain Time Data conflicts with Process Payroll Segregation of DutiesHigh
Mass Allocate Journal Entries conflicts with Enter Journal Entry Segregation of DutiesMedium
Mass Transactions conflicts with Approve Invoices Segregation of DutiesMedium
Mass Transactions conflicts with Approve Purchase Orders Segregation of DutiesMedium
Mass Transactions conflicts with Create Sales Order Segregation of DutiesMedium
Mass Transactions conflicts with Payables Invoices Segregation of DutiesMedium
Mass Transactions conflicts with Payables Payments Segregation of DutiesMedium
Mass Transactions conflicts with Purchase Orders Segregation of DutiesMedium
Mass Transactions conflicts with Release Sales Order Segregation of DutiesMedium
Mass Transactions conflicts with Remittances Segregation of DutiesMedium
Mass Transactions conflicts with Ship Customer Goods Segregation of DutiesMedium
Mass Transactions conflicts with Receivables Receipts Segregation of DutiesMedium
Modifiers conflicts with Enter Customer Receipts Segregation of DutiesMedium
Modifiers conflicts with Release Sales Order Segregation of DutiesMedium
Modifiers conflicts with Remittances Segregation of DutiesMedium
Modifiers conflicts with Ship Customer Goods Segregation of DutiesMedium
Modify Bank Information conflicts with Item Price List Segregation of DutiesMedium
Modify Bank Information conflicts with Modifiers Segregation of DutiesMedium
Modify Employee Information conflicts with Define Payroll Information Segregation of DutiesHigh
Payables Invoices conflicts with Payables Payments Segregation of DutiesHigh
Payables Invoices conflicts with Payables Setup Segregation of DutiesHigh
Payables Invoices conflicts with Purchase Orders Segregation of DutiesHigh
Payables Invoices conflicts with Receive Goods and Services Segregation of DutiesMedium
Payables Payments conflicts with Purchase Orders Segregation of DutiesHigh
Payables Payments conflicts with Receive Goods and Services Segregation of DutiesHigh
Payables Setup conflicts with Payables Invoices Segregation of DutiesHigh
Payables Setup conflicts with Payables Payments Segregation of DutiesHigh
Payroll Maintenance conflicts with Process Payroll Segregation of DutiesHigh
Perform Cash Reconciliations conflicts with Item Price List Segregation of DutiesHigh
Perform Cash Reconciliations conflicts with Ship Confirm Goods Segregation of DutiesMedium
Perform Cash Reconciliations conflicts with Ship Customer Goods Segregation of DutiesMedium
Physical Inventory conflicts with Receive Goods and Services Segregation of DutiesMedium
Post Journal Entry conflicts with Approve Invoices Segregation of DutiesHigh
Post Journal Entry conflicts with Approve Purchase Orders Segregation of DutiesHigh
Post Journal Entry conflicts with Assets Depreciation Segregation of DutiesHigh
Post Journal Entry conflicts with Assets Workbench Segregation of DutiesHigh
Post Journal Entry conflicts with Create Sales Order Segregation of DutiesHigh
Post Journal Entry conflicts with Enter Customer Receipts Segregation of DutiesHigh
Post Journal Entry conflicts with Enter Enterprise Asset Management Transactions Segregation of DutiesHigh
Post Journal Entry conflicts with General Ledger Setup Segregation of DutiesHigh
Post Journal Entry conflicts with Maintain Chart of Accounts Segregation of DutiesHigh
Post Journal Entry conflicts with Mass Transactions Segregation of DutiesHigh
Post Journal Entry conflicts with Payables Invoices Segregation of DutiesHigh
Post Journal Entry conflicts with Payables Payments Segregation of DutiesHigh
Post Journal Entry conflicts with Physical Inventory Segregation of DutiesHigh
Post Journal Entry conflicts with Purchase Orders Segregation of DutiesHigh
Post Journal Entry conflicts with Release Sales Order Segregation of DutiesHigh
Post Journal Entry conflicts with Remittances Segregation of DutiesHigh
Post Journal Entry conflicts with Ship Customer Goods Segregation of DutiesHigh
Pricing Agreements conflicts with Enter Customer Receipts Segregation of DutiesHigh
Pricing Agreements conflicts with Release Sales Order Segregation of DutiesHigh
Pricing Agreements conflicts with Remittances Segregation of DutiesHigh
Pricing Agreements conflicts with Ship Customer Goods Segregation of DutiesHigh
Purchase Orders conflicts with Approval Authorization Control Segregation of DutiesHigh
Purchase Orders conflicts with Approve Invoices Segregation of DutiesMedium
Purchase Orders conflicts with Enter Purchase Order Release Segregation of DutiesHigh
Purchase Orders conflicts with Receive Goods and Services Segregation of DutiesMedium
Purchase Orders conflicts with Return Goods and Services Segregation of DutiesHigh
Purchasing Setup conflicts with Purchase Orders Segregation of DutiesHigh
Purchasing Setup conflicts with Receive Goods and Services Segregation of DutiesHigh
Receivables Banks conflicts with Receivables Receipts Segregation of DutiesHigh
Receivables Clear Customer Balances conflicts with Receivables Receipts Segregation of DutiesHigh
Receivables Credit Memos conflicts with Receivables Receipts Segregation of DutiesHigh
Receivables Receipts conflicts with Create Sales Order Segregation of DutiesHigh
Receivables Receipts conflicts with Customer Account Maintenance Segregation of DutiesHigh
Receivables Receipts conflicts with Receivables Transactions Segregation of DutiesMedium
Receivables Receipts conflicts with Release Sales Order Segregation of DutiesHigh
Receivables Setup conflicts with Receivables Transactions Segregation of DutiesHigh
Receivables Transactions conflicts with Customer Credit Information Segregation of DutiesMedium
Receivables Transactions conflicts with Release Sales Order Segregation of DutiesMedium
Receivables Transactions conflicts with Remittances Segregation of DutiesMedium
Remittances conflicts with Create Sales Order Segregation of DutiesMedium
Remittances conflicts with Release Sales Order Segregation of DutiesMedium
Return Goods and Services conflicts with Enter Customer Receipts Segregation of DutiesMedium
Reversing Receipts conflicts with Ship Customer Goods Segregation of DutiesMedium
Set Up Payment conflicts with Payables Invoices Segregation of DutiesHigh
Set Up Payment conflicts with Payables Payments Segregation of DutiesHigh

System Hardening

Showing 1 control:
Control TitleControl TypeRisk Rating
Monitor delivered and super user accounts not locked or end dated System HardeningHigh