SoD Reporting for Workday

Audit Reporting Tool for Workday

Analyzing access and monitoring segregation of duties risks are on-going challenges for a complex, leading enterprise finance, HR, and planning solution like Workday. Our team of Certified Internal Auditors has analyzed the unique challenges presented by Workday and developed audit templates, segregation of duties rules, and key audit reports to achieve continuous compliance. Fastpath Assure^® breaks down the complex security model of Workday into easily consumable reports that help identify the following: .

Security group membership
Domain and business process access
Organization restrictions
Risk in user access

Access Review

The Access Review module in Fastpath Assure makes reporting easier by allowing you to pull the exact data you need when you need it. The module has the functions necessary to create repeatable, scheduled reports for the sensitive areas of your business. These reports can be shared with necessary approvers and sign-offs can be recorded. Use Access Reviews to answer these questions:

Which users have access to a specific domain or business process action?
What security groups are providing access?
Which organizations is a user limited to?

Access Certifications

Access Certifications allows you to schedule periodic reviews and sign-off of different types of access: Conflict, Security Group Assignment, Critical Access, Business Process (collection of domains and business process actions) and Product access. The module offers:

'Run Now' Capability – The ability to run a schedule on-demand from the ‘Review Schedules’ setup place. This will allow you to create reviews without having to wait until the next scheduled run time.
Delete Reviews – The ability to delete a review which will delete all of the review items included in this review.
Export From All Reviews – This export includes the Generated Date, Due Date, and Completed Date of the reviewers and review items.

Segregation of Duties (SoD)

With the Assure Segregation of Duties module you can further analyze user access to domains and business process actions for risks against your conflict ruleset. Where necessary, you can assign mitigations for later audit reporting. You can easily create reports, share them in multiple formats, and have them signed off on in the application. Saving the reports as templates and the ability to schedule them, automate your audit and security reporting for continued success.

Key Considerations When Selecting GRC Software

Sarbanes-Oxley regulations are complex, but there are ways to simplify it. In this short E-book, Norman Marks focuses on simplifying your controls and other considerations when choosing your GRC software.

Download the Paper

Step-by-Step Guide to Designing Oracle ERP Cloud Security

Building A Strong Security Architecture for Oracle ERP Cloud - Protect your company with this Step-by-Step approach. For companies looking to move to Oracle ERP Cloud, it is critical to include a strong application security design aimed to deter fraud, and ensure that transactions performed in the cloud are appropriate and authorized. Whether you're implementing or redesigning your Oracle project, follow this guide to achieve a secure Oracle ERP Cloud system and avoid the common pitfalls in the process.

Get the report here!

Others_Template_Role Duty Matrix for D365-1

Dynamics 365FO Matrix

Building roles and implementing strong security in D365FO can be a daunting task, so we created a tool to assist in designing security roles for Dynamics 365 for Finance and Operations.

Get the Matrix!

Access Controls in SAP - The What and How of SAP Security

Whether you know the importance of access controls or not, implementing and maintaining them can still be a difficult part of your SAP security plan. The audit and security expert, Keith Goldschmidt, goes over what access controls are, how SAP handles them, how you should implement and maintain them, and even suggests some tools to make the process easier on you.