IT Audit - Governance, Risk, and Compliance Topic for Oracle Applications - page 244

Within the Manage Incident panel, analyze using visualization and various filters to
determine when one user has conflicting access points that span across roles. Carry
out the following steps to remediate inter-role incidents:
• Determine how to remediate : These reports, along with online analysis will
help to give context to what conflicting access an individual user has. It is
up to the business to decide how to remediate those incidents. Generally,
role access may need to be removed from a user or restructuring of a menu
related to a role may need to be considered where there are conflicting
access points.
• Simulate : Before actually making any changes in your business system, you
may want to simulate what would happen if you were to make the change.
Navigate to Simulation and exclude an access point to see how your action
would impact your conflicts, roles, controls, and users.
• Remediate : Following your company change-tracking process, request that
the change be made in your business system. For instance, if you decided to
revoke a role assignment for a user, be sure to let that user know your plans
and be sure this change actually makes it to the production system.
• Repeat : Remediation is an iterative process. Continue to focus on high-
priority, high-risk, and high-volume areas to clean up your business system.
Additional reports to analyze incidents
Running a seeded report or extract is another way to analyze incidents and help with
remediation. You can navigate to the Reports Management page to view additional
reports, as shown in the following screenshot: