Advanced Access Controls Analyst

Code Name

ORA_GTG_APPLICATION_ACCESS_AUDITOR_JOB

Duty Roles

This job role is related to the following duty roles:

• Advanced Access Control Model Transaction Analysis Duty

• Advanced Access Control Transaction Analysis Duty

• Advanced Financial Control Models Transaction Analysis Duty

Subject Areas

This job role secures access to the following subject areas:

• Risk Management Cloud - Advanced Access Controls Real Time

• Risk Management Cloud - Advanced Access Models Real Time

• Risk Management Cloud - Advanced Financial Models Real Time

Business Questions

This job role secures access to data that can answer the following business questions:

• What advanced controls have been defined?

• What Financial Reporting Compliance objects have the incidents been related to?

• Which groups are authorized to view and edit a record (such as control or result), and are they eligible?

• What comments have been posted against the incidents?

• What is the model name?

• Which users have conflicting access?

• How many results were returned for the model?

• How many incidents are assigned or in remediation with 0-30 days age?

• What SOD conflicts have been identified for users and roles?

• What unique codes correspond to the role and privilege display names?

• Is the model ready to be deployed as a control? (Does the model return only the expected exception-based results?)

• When was the last time the control was run?

• Who are the owners, editors, and viewers assigned to records (such as control or result), and are they eligible?

• Which perspectives will be defaulted on results when a control is run?

• What advanced financial models have been defined?

• Will the model results help to analyze exceptions, or does model logic need to be adjusted?

• What access points are included in the entitlements?

• How many incidents have been closed?

• How many incidents were found in the last control run?

• Who is authorized to view and edit a record (such as control or result), and are they eligible?

• What are the summary result counts for models in the North America perspective?

• Which controls are in the North America perspective?

• Since the same incident path is often found across users, what is the unique incident path count?

• Which groups of owners, editors, and viewers are assigned to a record (such as control or result), and are they eligible?

• Which roles have conflicting access?