More Ideas On Compliance
Ask your managers these questions on compliance
Here are some questions that you might want to pose to managers of Oracle E–Business Suite applications:
-
Is there a defined, consistent methodology for processing Oracle E–Business Suite patches? If so, to what degree does the process depend on one employee? Is the process documented and does it meet “best practices” standards?
-
What workflow controls are in place for patching?
-
Does everyone involved in the Oracle E–Business Suite patching process have the right level of access to the system? For example, can a business analyst download a patch when necessary or does the whole process rely on a DBA?
-
What authorizations are required to promote a patch from one environment to another? Are there controls in place to ensure that a patch is only promoted once the required approvals are in place? What controls are in place, specifically?
-
Is there a verifiable record of relevant Oracle EBS patching transactions? Does the record track when patches were made, in addition to when they were promoted (with date and time stamps) and who approved them?
-
What level of reporting is available? For example, is there a readily–available list of what patches have been applied to different environments?
How can we help?

