1 Introduction

Software-as-a-Service (SaaS) is changing technology today. SaaS applications shift responsibilities from retailers and their data centers to cloud service providers. The cloud service provider is responsible for upgrades, uptime and security. Oracle provides many retail cloud services, including Oracle Retail Merchandising Cloud Service Suite.

The Oracle Retail Merchandising Cloud Service is a suite of software-as-a service solutions that provides retailers with breakthrough capabilities. This includes role-based dashboards that surface relevant buying, inventory, pricing and financial information, leveraging retail science and data analytics to accelerate critical decision making. By using Oracle's modern exception-based retailing methodology to identify situations that require attention, the solution vastly reduces the amount of time merchandising professionals spend on nonproductive tasks and frees up more time to focus on strategic business goals.

Oracle Retail Merchandising Cloud Service Suite consists of:

• Oracle Retail Merchandising Foundation Cloud Service

• Oracle Retail Pricing Cloud Service (optional licensable component)

• Oracle Retail Allocation Cloud Service (optional licensable component)

• Oracle Retail Invoice Matching Cloud Service (optional licensable component)

This document is divided into six main sections:

• Responsibilities – The Responsibilities section of the document discusses the shared responsibility model of security.

• Oracle Retail SaaS Security – This section of the document outlines the policies and procedures Oracle Retail uses to meet its security responsibilities.

• Merchandising Cloud Service Suite Architecture – This section details the architecture of the Merchandising Cloud Service, particularly as it relates to security.

• Merchandising Cloud Service Suite Authentication, Authorization and Data Filtering – This section describes how Merchandising Cloud Service performs authentication and authorization, as well as how data filtering can be applied.

• Frequently Asked Questions – This section includes a number of specific questions related to security that are frequently asked by prospects, customers and implementers.

The goals of this document are to:

• Explain the security responsibilities of Oracle and the Retailer in the SaaS model

• Educate retailers about Oracle's cloud security policies and controls

• Describe Merchandising Cloud Service's

  • general architecture, particularly as it relates to security

  • security features

• Define additional steps customer IT staff must perform to communicate securely with Merchandising Cloud Service

• Guide Customer administrators in the actions they need to perform to

  • create application users

  • assign roles to application users

• Provide answers to frequently asked questions about Merchandising Cloud Service security