In release 25B, Oracle will begin to introduce the most significant overhaul related to application security.
Fusion Cloud: Oracle’s 25B release means Major Enhancements
Posts about Blog (2):
Significant Deficiencies: How the “System” Undermines Secure and Compliant ERP Implementations and What Auditors Overlook
Having been in this space for over 25 years, I have seen the good, the bad, and the ugly. The deck is stacked against a secure and compliant ERP system implementation. Most publicly traded organizations implementing a new ERP system likely will have one or more “Significant Deficiencies” in the first year that should be reflected in audit findings. However, auditor ignorance often prevents these from being recognized.
Perpetual Patch Cycles Define Todays Digital Revolution for Saas Applications
A digital revolution is upon us! We are witnessing the greatest digital transformation since Y2K thanks to perpetual patch cycles within SaaS Applications. Organizations are ridding themselves of building and managing data centers by moving their legacy applications to hosted data centers. And thus moving many of their legacy applications to modern SaaS applications.
Why Identity and Segregation of Duties Are the New Perimeter
Organizations are implementing new SaaS ERP systems to modernize their enterprise. Traditional cybersecurity risks are being outsourced to the software provider, yet certain cybersecurity risks still need to be addressed by management.
3 Billion Reasons To Do More Than Just Secure The Perimeter
Most organizations have mature processes and controls related to preventing a breech on their internal systems – what we refer to as “securing the perimeter.” The thought being: Keep the bad guys out of our network and our data is protected. Or at least management assumes this is the case.
Auditors Are Talking about Segregation of Duties Too Much!
Having been in the Security and Controls space for far too long, I have witnessed and am still witnessing a phenomenon that needs to be addressed. Auditors talk WAY too much about Segregation of Duties.
Top 4 Reasons You Need THIS Cyber Security Approach
From our Cyber Security technical expert, Connor Thompson, CIA CISA
Fusion Cloud: The Irony Related in Oracle’s Latest Article on Cybersecurity
There’s a Lack of Native MFA in ERP/HCM Cloud.
Oracle released this article in March highlighting the top cybersecurity threats and how to prevent them. In the article, they highlight the number one risk as “Business Email Compromise (BEC).”
Top 3 Tips for Resovolutions: Setting the Right Objectives
The Why Behind Our Tips
In the following article, I make the case for why these top 3 tips are crucial action steps for your organization. We call it “turning resovolutions into action.” For 25+ years I have been watching ERP (Enterprise Resource Planning) implementations go live that are half-baked at best. This has created massive headaches, risks, and audit findings for organizations. The issues are systemic, and management needs to be diligent to avoid them.
A Revolution of Resovolutions
Part of our 2024 Resovolutions is to revolutionize the way organizations identify, manage, and mitigate risk in their ERP systems. Application security design and management risks produce a significant, immature control within organizations. Management knows these risks are often not being managed properly. The benefits seem to outweigh the risks when you consider: