IT Audit - Governance, Risk, and Compliance Topic for Oracle Applications - page 231

All IT control documents, audit tests, user surveys, incidents, and remediation
actions are managed in Oracle GRC Manager. In order to learn more about setting
up an Audit plan, testing controls, tracking issues, and monitoring remediation
actions in Oracle GRC Manager, refer to Chapter 10 , Cross Industry Cross Compliance .

Automated application controls using
Oracle GRC Controls Suite
Oracle GRC Controls Suite consists of the following four modules:

• Application Access Controls Governor (AACG)
• Transaction Controls Governor (TCG)
• Coniguration Controls Governor (CCG)
• Preventive Controls Governor (PCG)

The following figure provides a view of the GRC Controls Suite:

Monitor Control Effectiveness

Defective Controls

What's
changed in
the process

What are the
execution
patterns

What users
have done

ACCESS
Controls

CONFIGURATION
Controls

TRANSACTION
Controls

What users
can do

How is the
process setup

How users
execute
processes

Preventive Controls

Enforce Policies in Context