EnterpriseOne Security Best Practices

Does anybody have guidelines or document for Security EnterpriseOne infrastructure including Enterprise Server, Admin Applications, Web Client, Password policies etc.?

We are really finding difficults in determining all the components which have to be secured.

Any help will be appreciate.
Thanks!!

The install manual, and the Server and Workstation Admin manual will give you a start as to where to begin looking. And I do mean "begin"...depending on if you need to be SOX compliant or just want to institute a company plan, security itself can be a 4 - 12 month project, with on-going admin afterwards.

Look at the post, 28625. This spreadsheet is pretty old...but it may give you a little help. There are many, many variants of this floating around.

Good luck...especially if you're dealing with SOx.

- Scott