1. Complementary Solutions for Lawson S3 MONITORING AND AUDITING FOR LAWSON S3 November 2013 Presented by Dan Kinsey

2. AGENDA o KINSEY OVERVIEW o SOLUTIONS o ACTIVITY MONITOR o TRANSACTION AUDITING o LIVE DEMO Complementary Solutions for Lawson S3

3. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 Founded in 1983 by Dan and Brad Kinsey, Kinsey has provided software sales, implementation, support and development for over 30 years. Infor-Lawson reseller and implementation partner since 1997 Infor-Lawson Certified Systems Integration Partner Infor-Lawson Complementary Software Partner Infor-Lawson’s “Go to” Reseller/Implementer for Public Sector Provided product and services to over 120 Lawson customers 2 time Partner of the Year OUR BACKGROUND MONITORING AND AUDITING LAWSON S3

4. LAUA Security Auditing Activity Monitor Transaction Auditing LAUA Segregation of Duties (SoD) LS9 Segregation of Duties (SoD) LS9 Auditing LAUA Security Reporting LS9 Reporting COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

5. ACTIVITY MONITOR (Listener) Purpose: Monitors all user activity in Lawson S3 applications for audit control and performance measuring. Target Audience: Internal & External Auditors, Security administrators, Department managers. Technology: Utilizes WebSphere in real-time to update activity in MySQL, MSSQL or Oracle. Reporting: Browser UI for creating and viewing reports; Excel pivot tables; Security Dashboard for metadata. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

6. ACTIVITY MONITOR (Listener) COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

7. Real Time Continuous User Activity Monitoring o Portal Activity o Smart Office Activity o MS Add-in Activity o First/Last Screen Used o Total Screens Used o Total Transactions Processed o Screen Usage Detail o Screen Access Restrictions o Multiple Reporting Methods o Transaction Auditing Optional Interface ACTIVITY MONITOR COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

8. ACTIVITY MONITOR COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

9. ACTIVITY MONITOR COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

10. ACTIVITY MONITOR Use MS Excel to view all summary activity by user-form, by user-system code or to create performance graphs. Drill on any cell to see the detail. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

11. ACTIVITY MONITOR Real-Time Portal, Smart Office, MS Add-in Monitoring Current and Historical Activity Reports Delivered through your Browser or Microsoft Excel Includes User, Form, Function Code, Date, Time, Form Keys Optional Restriction Scheduling Optional Interface to Transaction Auditing Data COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

12. TRANSACTION AUDITING Purpose: Transaction auditing provides the ability to track who has changed or viewed any information in Lawson’s S3 applications and indentify the user and data affected. Target Audience: Internal & External Auditors, Security administrators, Department managers Technology: Utilizes WebSphere in real-time to update activity in MySQL, MSSQL or Oracle. Reporting: Browser UI for creating and viewing reports; HTML output; exportable to MS Excel or PDF COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

13. TRANSACTION AUDITING COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

14. TRANSACTION AUDITING - SETUP Audit Definitions o Product Line o User Name o Screen Name o Function Code o IP Address o Time Range o Retention Policies COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

15. TRANSACTION AUDITING - SETUP COMPLEMENTARY SOLUTIONS FOR LAWSON S3

16. TRANSACTION AUDITING - REPORTING Audit Data o Product Line o User ID associated with the transaction o Origination System IP address o Product Line o Screen name o Function Code o Reason Code o Transaction Date o Transaction Keys o Field Names o Field Values (Before & After) COMPLEMENTARY SOLUTIONS FOR LAWSON S3

17. TRANSACTION AUDITING – REPORT CRITERIA COMPLEMENTARY SOLUTIONS FOR LAWSON S3

18. TRANSACTION AUDITING – REPORTING COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

19. TRANSACTION AUDITING – HR/PAYROLL EXAMPLES Employees and managers can enter education and certification information in to Self Service but there is no audit. The HR staff needs to verify that the employee really received the education, skill, etc. Forms to audit:PA20.1Education PA21.1Competencies PA22.1Certification Provide the ability to audit changes made to time records that come in from a workforce management system such as Kronos or Workbrain. This would include an deletions to time records. Forms to audit:PR35.1Time Entry COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

20. TRANSACTION AUDITING – FINANCE EXAMPLES In GL when setting up the company there is an option to allow JE’s to be Unposted and Unreleased prior to closing the month. If you do this there is no evidence the JE ever existed. Forms to auditGL45.1 provides the option to Unpost & Unrelease GL40.1 provides the option to delete the entry Along the same lines you can open a closed GL period for back posting which also has no audit trail. Forms to auditGL10.1Company GL10.2Backposting Control COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

21. TRANSACTION AUDITING – FINANCE EXAMPLES In Cash Ledger there are no audits for any cash transaction entry which can include Deposits, Transfers and Bank Transactions including Payment Entry. This lets you enter a payee without having a vendor to create a check. Forms to auditCB10Deposits CB15Transfers CB20Bank Transactions CB55Payment Entry Also in Cash Book would be Bank Transaction Adjustments which is used to reconcile payments, set them as void, stop payment, etc. Form to auditCB80Bank Transaction Adjustment COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

22. TRANSACTION AUDITING – CONTROL EXAMPLES Transactions for a specific group of users (i.e. Internal Lawson Support Group) All Lawson set-up forms Time based transactions Transaction originating from a specific IP Address HealthcarePatient’s name is on a requisition Employees are also patients COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

23. ACTIVITY MONITOR vs. TRANSACTION AUDITING FeatureAMTA User IDYesYes IP AddressYesYes Date/TimeYesYes Product LineYesYes ApplicationYesYes Form IDYesYes Function CodeYesYes KeysYesYes Report WriterYesYes MS Excel OutputYesYes Manager RestrictionsYesNo Field Level DataNoYes Before and After ChangesNoYes Report SchedulingNoYes Licensing RestrictionsNoYes COMPLEMENTARY SOLUTIONS FOR LAWSON S3 MONITORING AND AUDITING LAWSON S3

24. Complementary Solutions for Lawson S3 DEMO link link

25. Complementary Solutions for Lawson S3 WEBCAST PROMOTION Enter in to a Proof of Concept agreement prior to March 1, 2014 and receive a no-obligation 30 day trial version. Non-Production Environment (DEV/TEST) Product will be billed upon acceptance of trial Requires 2 days of remote installation services to be billed upon acceptance of trial Requires a virtual server to be provided by customer Available for Portal and Microsoft Add-in transactions Promotion not available for hosted applications Trial period must begin no later than July 1, 2014

26. Complementary Solutions for Lawson S3 CONTACT Guy Henson Kinsey & Kinsey, Inc 26. N Park Boulevard Glen Ellyn, Illinois 60137 630-858-4866 g.henson@kinsey.com Visit us at: www.kinsey.com