Pa
gePic
ADINEO has designed a practical, yet powerful solution which provides you with the ability to manage your remediation process in a seamless and simple way, hiding the complexity of ERP technical authorization frameworks. Remediation targets business functions definition, organisation design and critical business risks coverage.
Remediation consists in making your ERP systems conform to the business governance and the business rules that your company has defined and validated. This governance often takes the form of an SoD matrix, gathering information about which business process or activity should be separated from each one.
The remediation effort consists in either removing cumulation of business processes / functions from single users or documenting business risks and business controls when this is not feasible.
What remediation is not ? Remediation does not consists in documenting every single SoD issue that you will be detecting and setting up hundereds of business controls. Auditors know that too much business controls necessarily means poor control.
At ADINEO, we have understood that remediation is foremost a business topic. We have also understood that remediation does not consist in assigning business controls to every single SoD issue that is detected, because everyone knows that not all these controls will and can reasonnably be reviewed because of the huge amount of work it requires. And every auditor will confirm this to you. Therefore, organisation and functions distribution and design are the core of our remediation process.
We have made remediation an easy task. From worklists definition, to user remediation (using graphical interface and tools), the ADINEO solution support the end-to-end process of remediation. The remediation process is handle in a collaborative manner, making all required competencies and skills within your company work towards the same target and respecting the same business rules.
Generally, "as-is" authorizations (assigned authorizations) do not reveal what users really need and also not what they really do in their day-to-day activity. However, some companies generally spend tremendeous time reviewing and remediating "as-is" authorizations: but what for if these accesses are never used? ADINEO has designed a powerful approach that combines the analysis of "as-is" authorizations assigned to users and authorizations these users really make use of. This unique approach saves you time and money, highlighting the actual issues, while making your remediation process efficient and controlled.
ADINEO resides outside the ERP. This means that you do not perturbate your ERP system while leading a remediation process. ERP system is only updated once remediation is finished. This also means that you do not spend your remediation time figthing with IT topics on authorizations setup.
While most solutions of the market provide you with a list of SoD issues per user, mixing IT details with business related issues, ADINEO goes far further and determines exactly who is actually making use of what. You do not remedy what people can do, but what they actually do. And this saves a lot of effort, money and ... headaches
In few clicks only, and relying on ADINEO automated functions, you get a clear picture of where the highest risks are located, and what will be the main topics to be adressed during your remediation project.
Using unique and innovative functions, ADINEO allows you to run a site by site remediation, without perturbating your productive system.
