May 2009 Oracle GRC Strategy – Barry Greenhut Configuration Controls Governor for PeopleSoft Enterprise HCM & E-Business Suite May 2009 Oracle GRC Strategy – Barry Greenhut

Configuration Governance, Risk Management & Compliance (GRC) Configuration GRC can reduce: Financial Loss Regulatory Compliance Cost Audit Effort Financial and Regulatory Risk …by: Controlling setup changes that can have significant financial or regulatory impact Identifying setup changes that violate financial or regulatory policy Accelerating documentation and analysis of setup values

Configuration Controls Governor (CCG) Use CCG to: Change Tracking Snapshots & Comparisons Reduce Financial Loss Control setup changes that can have significant financial or regulatory impact Reduce Compliance Cost Identify setup changes that violate financial or regulatory policy Alert users when key setups change Find differences between production & baseline Reduce Audit Effort Accelerate documentation and analysis of setup values Complete audit trail of all changes Document all setup values, as seen in the original application

Advantages of Configuration Controls Governor Feature With CCG Without CCG Change Tracking Alert users whenever changes occur Dashboard summarizes changes in all environments Drill down to see details of all changes Export change details to CSV (Excel) and PDF See changes only for fields with Effective Dating enabled View only one page’s values at a time, and only one environment’s values No alerts No dashboards or summaries No native reports – must be built one by one using developer’s tool (PS Query) Snapshots & Comparisons Document all setup values, as seen in the original application Compare two environments’ values (e.g., Production vs. Best-Practice), and/or compare two points in time Export all details to CSV and PDF

Advantages of Configuration Controls Governor Feature With CCG Without CCG Full Data Security Control the business data seen by each CCG user Control the actions each CCG user can take Install CCG in firewalled tier All users who see audit trails can see all audit trails Flexibility Reconfigure Change Tracking on demand Schedule Snapshot schedules, and take Snapshots on demand Generate Comparisons on demand Add new business environments on demand Must be enabled during PSFT installation

Advantages of Configuration Controls Governor Feature With CCG Without CCG Metadata – Ready to Use Shrink-wrap support for 9 PSFT HCM 8.8 modules (400+ setups) Shrink-wrap support for 12 EBS R12 modules (550+ setups) and 66 EBS 11i modules (3,000+ setups) Add support for additional setups with MetaBuilder, a developer’s tool included See changes only for PSFT fields with Effective Dating enabled

Advantages of Configuration Controls Governor Mature Product Introduced in 1998 Over 300 EBS customers Over 60,000 developer-hours invested in creating metadata for PSFT and EBS

PSFT HCM Has Limited Configuration GRC Features of Its Own PSFT HCM has built-in functionality that can do some of the same things that CCG does: Effective Dating Only on a per-field and per-environment basis No ability to view/compare many fields at once, or to compare two environments' values Only when enabled during PSFT installation Only for some setup fields PeopleSoft Query Requires substantial expertise and effort to design each report Must design a separate report for each table Requires either Effective Dating or Database Audit

EBS Also Has Limited Configuration GRC Features of Its Own EBS has built-in functionality to take and compare Snapshots (iSetup), but: Does not offer Change Tracking - no audit trail or alerts Only on a per-environment basis Only some setups, and only some fields Does not display data as seen in EBS

CCG Offers Greatest Value to Organizations that: Have both PSFT HCM and EBS, and need to control the configurations of both Need a single place to manage all configuration GRC Need alerts when changes occur Need to control setups not covered by built-in functionality PSFT HCM Need to document or compare entire setups Need to compare two environments' setups Need to enable configuration management after installing PSFT EBS Need audit trails that can be understood by business users

Summary Configuration Controls Governor offers GRC value: Reduce Financial Loss and Risk Reduce Regulatory Compliance Cost and Risk Reduce Audit Effort CCG is a mature product that provides a single place to manage all configuration GRC CCG comes ready-to-use, with support for: PSFT HCM 8.8 (400+ setups) EBS R12 (550+ setups) EBS 11i (3,000+ setups)

Additional Information

CCG comes with support for 400+ PSFT HCM 8.8/8.3 setups Nine modules supported: Other setups can be supported using MetaBuilder Oracle evaluating market for HCM 8.9/9.0 and Financials 8.8/8.9/9.0 Base Engine Benefits Compensation Human Resources Payroll Pension Recruiting Stock Administration Workflow

CCG also comes with support for EBS EBS R12 550+ setups EBS 11i 3,000+ setups PSFT HCM 8.8 400+ setups BASE ENGINE Alerts Application Object Library Common Modules System Administration FINANCIALS General Ledger Subledger Accounting Payables eBusiness Tax Legal Entity Configurator Receivables / iReceivables PROCUREMENT iProcurement Purchasing BASE ENGINE CONTRACTS CRM DISTRIBUTION FINANCIALS HR/PAYROLL MANUFACTURING PLANNING PROCUREMENT PROJECTS PUBLIC SECTOR HCM Benefits Compensation HR Payroll Pension Recruiting Stock Administration Workflow

PSFT HCM built-in features: Effective Dating Lets users assign start/end dates to operational data Example: Create two salary records for John Doe, one effective through June 30, another beginning July 1 Both records stored indefinitely (i.e., versioning of records) Lets users create multiple records effective for the same date range Records identified by automatically assigned sequence numbers

PSFT HCM built-in features: Effective Dating

PSFT HCM built-in features: PeopleSoft Query General-purpose reporting tool Flexible and powerful, but obliges the user to design each report With sufficient skill and effort, users could build a report that compares a single table’s Effective Dating records, but the report would be missing some vital information (see the preceding comparison) For tables without Effective Dating, users could turn on database audit, and then build a report that compares the audit records, but most users won’t consider this option for tables that would generate a large amount of audit data

PSFT HCM built-in features: Summary Effective Dating Only on a per-field and per-environment basis No ability to view/compare many fields at once, or to compare two environments' values Only when enabled during PSFT installation Only for some setup fields PeopleSoft Query Requires substantial expertise and effort to design each report Must design a separate report for each table Requires either Effective Dating or Database Audit