Thursday, May 11, 2006
Oversight for Segregation of Duties
Risk-based Prevention & Automated Mitigating Controls
Real world compliance demands a complete, closed-loop control system that identifies segregation of duties conflicts across multiple systems, quantifies control risk based on how (and if) a control weakness is exploited, monitors known risks where segregation of duties conflicts cannot be eliminated and provides documented proof of control effectiveness.
Oversight Systems takes continuous controls monitoring to the next level by combining user access rights testing with its patented real-time transaction inspection. Preventive controls combine with real-time detective controls to provide best practices in corporate governance, compliance and risk management. Finally, a solution for segregation of duties in the real world.
Until Oversight, companies had to choose between controls software that either tested a single ERP system for segregation of duties conflicts or analyzed historical transactions for control violations. However, our patented software builds upon each of these first generation technologies to:
* Identify segregation of duties conflicts across heterogeneous financial systems
* Analyze all historical transactions to determine if segregation of duties were ever violated
* Prioritize corrective actions based on actual risk of where segregation of duties violations have occurred
* Automate mitigating controls where segregation of duties conflicts cannot be eliminated
posted by Brian Moran @ 9:28 AM