Results 1 to 3 of 3

Thread: IT Audit

  1. #1
    Member Rauf's Avatar
    Join Date
    Jan 2012
    Kerala, India

    IT Audit

    In the perspective of JDE developer/ techno-functional, what kind of queries I may face from IT auditors, as this is the first time I go through the auditing session. How can I be more smart to implement the suggestions before they suggests ? I guess there may be so many users already gone thru the auditing process.
    JDE Techno-Functional
    JDE E1 8.12 | TR 8.96.40 | Windows XP SP 3

  2. #2
    Member BPConnor's Avatar
    Join Date
    Jul 2002
    Thornton, CO
    looking at an audit from inside of JDE only (eliminating all of the factors such as infrastructure and AD permissions etc) you can expect an auditor to look at:
    *who has access to critical programs (master data management programs such as item master, address book master, supplier master etc) in Production
    *who has access to create, enable or modify user profile
    *who has access to security and CNC tools especially OMW configuration and permissions
    *documented approvals for system changes including new user setup, role access changes, and object promotions
    *extracts of the security, user, role relationship, and environment access tables
    *if you are publicly traded then you also add SOX compliance into the mix
    JDE E1 Xe to 9.0 installation, configuration, and upgrades.
    GSI Security Practice Lead
    Highly Experienced with all facets of JDE security, specializing in the implementation and support of All Out Security.

  3. #3
    also add security history to the mix if enabled
    EnterpriseOne 8.12 to 9.2
    AIX, Linux, Windows, IBM i
    Oracle DB, MSSQL, DB2
    WAS, WLS

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
The legal restrictions and terms of use applicable to this site are available here.
Use of this site signifies your agreement to the terms of use.
JDELIST is NOT affiliated with JD Edwards® & Company, Oracle or Peoplesoft. Contents of this site are neither endorsed nor approved by JD Edwards® & Company and, or Oracle.