Security Governance - Governance, Risk, and Compliance Topic for Oracle Applications - page 103

• Financial perspective:
° Minimize the cost of security breaches
° Minimize cost of fraud
° Minimize cost of disaster recovery
• Process perspective:
° Maintain confidentiality
° Minimize the time between a job change and authorization changes
° Minimize time between End of Employment and Revocation
of Accounts
° Segregation of Duties required or authorize and dispense funds
° Align security with corporate strategy
° Appropriately harden systems
° Maintain availability of systems
° Reduce number of audit issues for security
• Learning and growth perspective:
° Recruit credentialed and experienced security professionals
° Document security policies
° Remain current on technical and regulatory issues
° Maintain a Risk Awareness program
Relationships between the objectives
The following bullets explain the relationships between those objectives:
• Customer perspective:
° If you demonstrate good governance over customer data you will
reduce the cost of security breaches
° If you maintain the availability of systems you will maintain a good
reputation for security
° If you ensure that you reduce the number of audit issues for security,
you will maintain a good reputation for security
• Financial perspective:
° If you maintain confidentiality you will minimize the cost of
security breaches.