system_audit.pptx

7/24/2019 SYSTEM_AUDIT.pptx

1/7

ORACLE HEALTH CHECK

COMPREHENSIVE : ORACLEAPPLICATIONS


2/7

Oracle Health Check Comprehensive for Oracle Applications is a complete

service delivered by Oracle experts to help align and optimize your

environment with your organizations latest business strategies and

processes. This service provides a comprehensive current state report card

and recommendations for improving your organizations use of Oracle

Applications to help maximize your investment reduce total cost of

ownership and position your organization for future change

An !"# system Audit specifically addresses the following ob$ectives% &eview and 'alidate the (nternal Control touch points for processes

implemented% Alignment with Organizational Ob$ectives ) #upport *inancial Audit% #ystem +anagement% ,erformance measurement-how well is the (T function supporting

business reuirements/% Awareness-what are the risks of not achieving the ob$ectives/% Adherence to #tandards ) How can results be measured and

compared/% 'alidate the optimum utilization of the customer (nvestment

OBJECTIV

E


3/7

COVEREAGE AREA


4/7

DETAILS OF KEY AREAS

"usiness ,rocess (ntegrity0

% (dentify control ob$ectives for processes being implemented.% (dentify and assess potential business risks and financial risks in the processes

being implemented% ,rovide assurance that the controls within !&, are appropriate and effective% &eview business continuity plans and provide reasonable assurance they have

been tested

Application #ecurity0

% &eview standard !&, parameters including application controls authorizations

and standard security configuration.

% Assess application security to allow processing in an efficient and controlledmanner while protecting valuable data.

% &eview design documentation for appropriate security and control% +any business processes may be extended out over the intranet extranet or

(nternet.% The auditor should provide &easonable assurance that security processes

appropriately address these risks


5/7

(nfrastructure ) (ntegration (ntegrity0

% (dentify internal system architecture issues that may cause performance

availability or data integrity challenges.% &eview the interfaces feeding into !&, from non1!&, systems 2such as

including legacy web based and mobile computing applications3.% &eview business recovery plans and provide reasonable assurance they have

been tested

(mplementation ) #upport (ntegrity0

% ,rovide reasonable assurance of a smooth transition to the new !&,

environment with minimal effect on employees and without any loss in

confidence as to the integrity security and accuracy of data.% (dentify potential risks connected with the transfer of data from the legacy

systems to the new production environment and interfaces with other systems.% Test and assess the functionality controls and readiness before 4go1live5.% ,rovide independent review of training for completeness of business process and

security considerations.% ,rovide post1implementation review of effectiveness of the control and security

environment and the overall management of the implementation ) #upport

process


6/7

6uality management0% Audit the effectiveness of the uality management and the uality assurance

during the (mplementation ,rocess

"enefit +anagement0% &eview the business ob$ectives of the pro$ect and the expected benefits to be

achieved. The benefits 2both uantitative and non1uantitative3 should be specifiedclearly in a benefits register. The uantified benefits should be broken down into

identifiable and measurable elements% &eview the control procedures to provide reasonable assurance of the benefits

achievement

&isk management0

% &isk relevant to the business processes% &isk associated with the pro$ect management7 the pro$ect risks can be either0

% (nherent which result from the nature of the pro$ect ob$ectives and scope% Acuired which result from the selected methodologies tools techniue

skills and experience that are applied to the pro$ect and to the risk

management

% (nformation security management during the system implementation% (nformation security management that is planned after the go live i.e. during the

system operations% +anagement of the risks introduced by systems that are external to the !&,

pro$ect and the risks that the !&, pro$ect can cause to third parties


7/7

AUDIT REPORT COVEREAGE:

% An overall Health Check 8ashboard that highlights the degree to which

your current environment supports your business drivers across the in1

scope areas and the key focus areas for improvement in each

% Additional supporting detail regarding our findings and analysis

% An actionable improvement plan containing specific recommendations

and actions to take to improve and better align your organizations

processes application usage and configuration and overall technology

deployment with your business ob$ectives

% (nsight into the value and benefit drivers associated with the

recommendations our experts make so that your organization can frame a

more robust business case for change

system_audit.pptx

Documents