1. May 2009 Oracle GRC Strategy – Barry Greenhut
Configuration Controls Governor for PeopleSoft Enterprise HCM & E-Business Suite
May 2009
Oracle GRC Strategy – Barry Greenhut

2. Configuration Governance, Risk Management & Compliance (GRC)
Configuration GRC can reduce:
Financial Loss
Regulatory Compliance Cost
Audit Effort
Financial and Regulatory Risk
…by:
Controlling setup changes that can have significant financial or regulatory impact
Identifying setup changes that violate financial or regulatory policy
Accelerating documentation and analysis of setup values

3. Configuration Controls Governor (CCG)
Use CCG to:
Change Tracking
Snapshots & Comparisons
Reduce Financial Loss Control setup changes that can have significant financial or regulatory impact
Reduce Compliance Cost Identify setup changes that violate financial or regulatory policy
Alert users when key setups change
Find differences between production & baseline
Reduce Audit Effort Accelerate documentation and analysis of setup values
Complete audit trail of all changes
Document all setup values, as seen in the original application

4. Advantages of Configuration Controls Governor
Feature
With CCG
Without CCG
Change Tracking
Alert users whenever changes occur
Dashboard summarizes changes in all environments
Drill down to see details of all changes
Export change details to CSV (Excel) and PDF
See changes only for fields with Effective Dating enabled
View only one page’s values at a time, and only one environment’s values
No alerts
No dashboards or summaries
No native reports – must be built one by one using developer’s tool (PS Query)
Snapshots & Comparisons
Document all setup values, as seen in the original application
Compare two environments’ values (e.g., Production vs. Best-Practice), and/or compare two points in time
Export all details to CSV and PDF

5. Advantages of Configuration Controls Governor
Feature
With CCG
Without CCG
Full Data Security
Control the business data seen by each CCG user
Control the actions each CCG user can take
Install CCG in firewalled tier
All users who see audit trails can see all audit trails
Flexibility
Reconfigure Change Tracking on demand
Schedule Snapshot schedules, and take Snapshots on demand
Generate Comparisons on demand
Add new business environments on demand
Must be enabled during PSFT installation

6. Advantages of Configuration Controls Governor
Feature
With CCG
Without CCG
Metadata – Ready to Use
Shrink-wrap support for 9 PSFT HCM 8.8 modules (400+ setups)
Shrink-wrap support for 12 EBS R12 modules (550+ setups) and 66 EBS 11i modules (3,000+ setups)
Add support for additional setups with MetaBuilder, a developer’s tool included
See changes only for PSFT fields with Effective Dating enabled

7. Advantages of Configuration Controls Governor
Mature Product
Introduced in 1998
Over 300 EBS customers
Over 60,000 developer-hours invested in creating metadata for PSFT and EBS

8. PSFT HCM Has Limited Configuration GRC Features of Its Own
PSFT HCM has built-in functionality that can do some of the same things that CCG does:
Effective Dating
Only on a per-field and per-environment basis
No ability to view/compare many fields at once, or to compare two environments' values
Only when enabled during PSFT installation
Only for some setup fields
PeopleSoft Query
Requires substantial expertise and effort to design each report
Must design a separate report for each table
Requires either Effective Dating or Database Audit

9. EBS Also Has Limited Configuration GRC Features of Its Own
EBS has built-in functionality to take and compare Snapshots (iSetup), but:
Does not offer Change Tracking - no audit trail or alerts
Only on a per-environment basis
Only some setups, and only some fields
Does not display data as seen in EBS

10. CCG Offers Greatest Value to Organizations that:
Have both PSFT HCM and EBS, and need to control the configurations of both
Need a single place to manage all configuration GRC
Need alerts when changes occur
Need to control setups not covered by built-in functionality
PSFT HCM
Need to document or compare entire setups
Need to compare two environments' setups
Need to enable configuration management after installing PSFT
EBS
Need audit trails that can be understood by business users

11. Summary Configuration Controls Governor offers GRC value:
Reduce Financial Loss and Risk
Reduce Regulatory Compliance Cost and Risk
Reduce Audit Effort
CCG is a mature product that provides a single place to manage all configuration GRC
CCG comes ready-to-use, with support for:
PSFT HCM 8.8 (400+ setups)
EBS R12 (550+ setups) EBS 11i (3,000+ setups)

12. Additional Information

13. CCG comes with support for 400+ PSFT HCM 8.8/8.3 setups
Nine modules supported:
Other setups can be supported using MetaBuilder
Oracle evaluating market for HCM 8.9/9.0 and Financials 8.8/8.9/9.0
Base Engine
Benefits
Compensation
Human Resources
Payroll
Pension
Recruiting
Stock Administration
Workflow

14. CCG also comes with support for EBS
EBS R setups
EBS 11i 3,000+ setups
PSFT HCM setups
BASE ENGINE Alerts Application Object Library Common Modules System Administration
FINANCIALS General Ledger Subledger Accounting Payables eBusiness Tax Legal Entity Configurator Receivables / iReceivables
PROCUREMENT iProcurement Purchasing
BASE ENGINE
CONTRACTS
CRM
DISTRIBUTION
FINANCIALS
HR/PAYROLL
MANUFACTURING
PLANNING
PROCUREMENT
PROJECTS
PUBLIC SECTOR
HCM Benefits Compensation HR Payroll Pension Recruiting Stock Administration Workflow

15. PSFT HCM built-in features: Effective Dating
Lets users assign start/end dates to operational data
Example: Create two salary records for John Doe, one effective through June 30, another beginning July 1
Both records stored indefinitely (i.e., versioning of records)
Lets users create multiple records effective for the same date range
Records identified by automatically assigned sequence numbers

16. PSFT HCM built-in features: Effective Dating

17. PSFT HCM built-in features: PeopleSoft Query
General-purpose reporting tool
Flexible and powerful, but obliges the user to design each report
With sufficient skill and effort, users could build a report that compares a single table’s Effective Dating records, but the report would be missing some vital information (see the preceding comparison)
For tables without Effective Dating, users could turn on database audit, and then build a report that compares the audit records, but most users won’t consider this option for tables that would generate a large amount of audit data

18. PSFT HCM built-in features: Summary
Effective Dating
Only on a per-field and per-environment basis
No ability to view/compare many fields at once, or to compare two environments' values
Only when enabled during PSFT installation
Only for some setup fields
PeopleSoft Query
Requires substantial expertise and effort to design each report
Must design a separate report for each table
Requires either Effective Dating or Database Audit