Академический Документы
Профессиональный Документы
Культура Документы
What is
important in Oracle E-Business suite?
KPMG LLP
Angela Carter
Jeff Kim
Jai Cullath
Agenda
System Process
Administration B Documentation
us
Change Management in Control Design and
ns
Disaster Recovery es
io
Implementation
s
t
Asset Management ra Pr Oracle Application
pe
oc Control Catalogs
O
Performance IT es
IT
ity
Infrastructure Data Conversion
gr
Se
te
Security (Network, Data Interfaces
cu
In
O/S and Database)
r
Reconciliation
a
ity
at
Security
D
Monitoring
Classes
Classes of
of Transactions
Transactions
Business
Business Processes
Processes
Process
Process AA Process
Process BB Process
Process CC
Financial
Financial Applications
Applications (application
(application controls)
controls) Application
Application
General
General Business Events andA Transactions
Financial Oracle
Application Controls
Controls
Controls
Controls •• Interfaces
Interfaces
•• Program
Program development
development
IT •• Configurations
Configurations
•• Program
Program changes
changes IT Infrastructure
Infrastructure Services
Services
•• Reports
Reports
•• Computer
Computer operations
operations Database
Database
•• Access
Access
•• Access control
Access control Operating
Operating System
System
•• Control
Control environment
environment Network
Network
Key Controls in an Oracle
EBS Audit
• Process, risks and controls
– Audits are often organized by business processes such
as Order to Cash, Procure to Pay, etc.
– ERP systems such as Oracle EBS support the
execution of such processes
– Risk and specifically information risk is inherent in
processes and systems
– Controls help to mitigate such risks
Let’s take a look at some processes, risks and Oracle EBS controls
Key High Focus Processes
• General Ledger
– Journal Postings
– Financial Consolidation
• Purchasing
– Purchase Order Processing
– Receiving
• Accounts Payables
– Invoice Processing (3-Way Match..)
General Ledger – Potential Risk
GL Postings – Control Considerations
Develop an enterprise-
wide strategy
Global Rule-Set
Implementation
Remediation and
Training
Lifecycle
Process
Technology
Plan
Plan
Design
Design
Build
Build
Test
Test
Deploy
Deploy
Four dimensions are addressed throughout any development lifecycle: People &
Organization, Process, Technology, and Risk & Controls. Aligning controls specialists with
project teams to help ensure appropriate knowledge is applied timely, can save significant
effort throughout the process.
These specialists, or “controls integrators,” provide specialized knowledge in applicable
control categories as shown below.
Key Attributes
Program Management
• Program risks are managed effectively – with
Control Categories
Centralized control Controls are configured and maintained centrally rather than
maintenance within every operating unit
Reduced cost of testing Automated controls require less testing and provides greater
controls assurance
Increased data reliability, Cost to identify and correct data error is high
integrity and accuracy
Improved reporting and Quicker and more reliable information for management allows
monitoring of information for more precise and responsive business decisions
Concluding Thoughts
Technology Finance
M&A Operations
Regulatory
Accounting
Compliance CFO AGENDA