Implementing Continuous Controls Monitoring (CCM)

Monitoring represents one of the most overlooked, but most effective, means to get information on how well key controls are operating over time. Having this information supplies management with the necessary facts and knowledge to mitigate significant risks to the business and to ensure that operating, financial and compliance objectives are met. (Source: ISACA).

We partner with our customers to help them implement a Continuous Controls Monitoring (CCM) solution using the Oracle Governance, Risk and Compliance Controls (GRCC) Suite. 

The Oracle Governance, Risk and Compliance Controls (GRCC) Suite includes:

• Oracle GRC Controls (GRCC) 8.6, which includes Application Access Controls Governor (AACG) 8.6 and Transaction Controls Governor (TCG) 8.6, which enables you to monitor:
  • Restricted Access Controls (AACG)
  • Segregation of Duties Controls (AACG)
  • Transaction Controls (TCG)
• Oracle Configuration Controls Governor (CCG) 5.5.1, which enables you to monitor:
  • Configuration Management Controls
  • Change Controls
• Oracle Preventive Controls Governor (PCG) 7.3.2 integrates with AACG and enables you to implement preventive Segregation of Duties controls.  PCG prevents an administrator from granting additional functions to a user that would result in a SOD control violation.  Alternatively, you can route the user provision request through an approval workflow process.

OIC Partners with Softlayer to Offer CCG Hosted Solutions

The OIC partners with Softlayer (formerly The Planet) to provide our customers with a hosted Oracle Configuration Management and Change Management Solution.  You purchase the Oracle license for Oracle Configuration Controls Governor (CCG) 5.5.1. We will install, implement, and configure a Continuous Controls Monitoring (CCM) solution for your Configuration Management and Change Management controls.  We will install the software on an IT infrastructure hosted by Softlayer, which is compliant with Oracle's GRC Support Matrix to ensure that your GRC solution is supported by Oracle.

We will maintain your instance of Oracle CCG including applying patches and upgrading as necessary and directed by you.  You have absolutely no investment in hardware.  Similarly, you don't have to invest in expensive resources to administer and maintain your CCM solution.

Contact Us to learn more.

Remote CCM for Restricted Access and Segregation of Duties

Unlike Oracle CCG, Oracle GRC Controls (GRCC) 8.6 must be installed on its own physical sever on your network.  Therefore, we can't offer you a hosted Continuous Monitoring Solution (CCM) for Restricted Access Controls and Segregation of Duties Controls.

However, after you purchase the Oracle License, we can install, implement and configure Application Access Controls Governor (AACG) 8.6 and Transaction Controls Governor (TCG) on your server.  We can use then provide remote CCM services using a VPN Connection.

This solution would require you to purchase hardware; however, we can administer and maintain your CCM solution for Restricted Access and Segregation of Duties.

Contact Us to learn more.

Oracle CCG 5.5.1 Hosted Solution

• No investment in hardware

• No investment in inhouse resouorces

• Monthly hosting fee

• Reduces IT Expenses

• Reduces Compliance Costs & Fees

• Reduces External Audit Fees

Your Data is Hosted by Softlayer, a SAS 70 Type II  Compliant Hosting provider.

Realize ROI Quicker

Use OIC GRC Professionals to install, implement and configure your Oracle GRC applications and then train your Super Users to use these applications.

• Realize ROI Quicker

• Use GRCIM to facilitate Effective & Efficient Oracle GRC Implementation

• Access OIC GRC Express Portal to Access GRC Sandbox & GRC Training Platform

• Participate in OIC GRC Forums

• Access Self-Study Courses in PDF, PPT and HTML Formats

Business Case

Contact Us if you would like assistance helping you develop a Business Case to justify your recommendation to implement an Oracle GRC Solution.