More effective and more flexible security to lower your total cost of ownership (PeopleSoft)

Reducing PeopleSoft cost of ownership with SEC-Qure for PeopleSoft

Steve Spencer

More effective and more flexible security to lower your total cost of ownership


Agenda

Q Software’s credentials

The need for effective security

Security issues in PeopleSoft

How Q Software addresses those issues

Segregation of Duties

Return on Security Investment


Analysis

Security

Management

Segregation

of Duties

Auditing

Compliance

Reporting

Auditors

Q Software – Clear market leader

150 man years Security Experience

= Lower Risk


Agenda








South Africa: 62% companies suffered fraud

59% experienced bribery &

corruption

Source: PwC 2009 crime survey

Australia: 40% suffered economic crime

- (full details yet to be published)

Source: PwC 2009 Crime survey

Canada: 55% companies suffered fraud

- 83% - asset misappropriation most common

- 38% detected by chance or by tip-off


Fraud is prevalent despite publicity and legislation!

UK: almost 50% admit to suffering fraud

almost 75% of larger (5,000+ employees)

- 33% of these suffered 100 incidents

Source: PwC 2009 fraud survey

Germany: 61% large businesses suffered crime- Average 8 incidents per business

-Average cost of crime cost 4.2 million Euros

Source: PwC 2009 fraud survey

USA: 35% companies suffered “significant

economic crime”

- most likely cause is pressure due to economy

- increased opportunity is primary driver


New Zealand: 42% suffered economic crime

- average cost $491,000

- most likely cause is pressure due to economy

- increasingly by middle / senior management

Source: PwC 2009 Crime survey


The risks are increased by turmoil

Current credit crunch / financial turmoil– Hasty mergers / job losses

– Additional responsibilities for existing staff

Major risks to security are– Long-term employees

– Disgruntled (ex) employees

Inadequate controls = Potential fraud– -ve effect on share price

– Potential for share-holder action against directors / officers


Who is protecting your business?

Businesses merging

Staff leaving

Other staff being given more system access


Agenda








Standard Features prior to 9.1– Security Available on Prompts

Only– Can Be Applied to Business Unit,

SetID, Ledger, Book, Pay Cycle, Project

– Defined System-Wide

Features Added for 9.1– ChartField Security

• Limited to 2 ChartFields• Context Driven – Can be Defined

at the Component Level

No way to secure– Bank Accounts, Suppliers, other

critical data

Security issues with PeopleSoft


Develop custom code

– Complex

– Expensive to maintain

– Requires re-work for upgrades

So...


Agenda








Introducing SEC-Qure® Config for PeopleSoft

Flexible & Configurable– Security for ANY fields on ANY page

Limits security by “user” or “permission list”, “row security class” or “role”

Allows context-based security

Extends security to any reporting solutions– Eg Cognos, Business Objects, Oracle BI

Enforces security– Prompts, Searches, Enquiries, Queries and data

entry

Business users can maintain their own security– Without need for IT intervention


Introducing SEC-Qure® Config for PeopleSoft

Helps SoX compliance with transaction authorizations

ANY 8.X or Later PeopleSoft Release

Simple to Apply or Undo Security Changes

Automated Tools for Pre-Populating Security Values

Provides Complete Audit Reporting


Introducing SEC-Qure® Config for PeopleSoft - Benefits

Allows decentralization of transactions

Reduces training & mistakes

Allows greater use of PeopleSoft Query

Reduces need for custom coding

Reduces Total Cost of Ownership

Enhances security reduces fraud


Agenda








Segregation of Duties: The problems

No easy way to manage SoD

Complexity of Components, Permission Lists & Roles

– How can you be sure you don’t violate SoD policy?


SEC-Qure® SoD for PeopleSoft : The Benefits

Easy to check effectiveness of your security– Reduces auditing effort & costs– Reduces risk of fraud, IP theft etc

Flexible rules to meet your precise needs– Saves time and avoids wasted effort

Prevention is better than cure Mitigation & notes

– Reduces reporting & simplifies audits

Improves business processes– Avoids need for duplication of controls

Reduces costs


Agenda








Security RoI Example

Requirement

– Allow dept managers & project owners to Review, Manage & Transact actual v budget ledgers

– Dept & project allocation amounts are “sensitive” data

– Cater for 800 budget transfers per month

Status

– Functionality not available in PS 8.9


If you have 500 users

Effective security can save

AU $ 1,000,000 p.a.


In Summary: SEC-Qure® for PeopleSoft

More effective & more flexible security for a lower total cost of ownership

Frees you from limitations of PeopleSoft

Gives you freedom to secure data at any level

Avoids need to develop difficult-to-maintain customizations using expensive staff

Reduces your security effort & costs

Enhances your security

Rapid RoI


Q

&

A

Technology

More effective and more flexible security to lower your total cost of ownership (PeopleSoft)