310 likes | 528 Vues
Complementary Solutions for Lawson S3. GREAT LAKE USER GROUP PRESENTATION October 18,2003 Presented by Dan Kinsey. Complementary Solutions for Lawson S3. PRODUCT OVERVIEW SECURITY DASHBOARD ACTIVITY MONTITOR TRANSACTION AUDITING SECURITY MIGRATION.
E N D
Complementary Solutions for Lawson S3 GREAT LAKE USER GROUP PRESENTATION October 18,2003 Presented by Dan Kinsey
Complementary Solutions for Lawson S3 • PRODUCT OVERVIEW • SECURITY DASHBOARD • ACTIVITY MONTITOR • TRANSACTION AUDITING • SECURITY MIGRATION
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 Transaction Auditing LS9 Reporting LAUA Security Reporting LS9 Auditing LAUA Security Auditing LS9 Segregation of Duties (SoD) LAUA Segregation of Duties (SoD) Activity Monitor
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 REPORTING • SECURITY REPORTS • Provides specific details on how your security model is built including all assignments for Users, Roles, Security Classes, Tokens and Attributes. • SECURITY ANALYZER • Built specifically for internal and external auditors this MS Excel based reporting shows screen access by user in an easy to use format. • SECURITY AUDITING • The auditing feature reports on all changes to your security model utilizing Lawson’ security audit data.
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 REPORTING • Purpose: Provides reports to auditors and security administrators on what access a user has to the Lawson S3 applications or what settings have been changed. • Target Audience: Anyone responsible for monitoring security (Internal & External Auditors, Security admin, Department managers.) • Technology: Browser UI for creating and viewing reports; exports to Excel for working off-line or printing. • Advantage: More delivered reports, does not require LBI or Crystal, advanced filtering and grouping.
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 DASHBOARD
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY 9 REPORTING (Security Administrators) • FEATURES • Report on • Users • Roles • Security Classes • Tokens • Attributes • Fields • Groups • Tables • Programs • Categories • Hierarchical Drills • Role down to Security Class • Role up to Users • Security Class down to Tokens • Security Class up to Roles • Dynamic Grouping • On-the-fly Sorting • On-the-fly Filtering • Export to MS Excel
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY 9 REPORTING (Security Administrators)
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY 9 REPORTING (Security Administrator) Video ACCT Role | Security Class User | Role AbsenceManagement1 Role | Security Class Security Class | Token
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY 9 ANALYZER (Auditors, Managers) • Access by User • Browser Based • MS Excel Output • Screen Access • Table Access • Program Access • Field Access • Conditional Logic • Filter by User • Filter by Role • Filter by Sys Code
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 RISK MANAGEMENT SOLUTIONS FOR LAWSON S3 SECURITY 9 ANALYZER (Auditors, Managers) ViewVideo
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 RISK MANAGEMENT SOLUTIONS FOR LAWSON S3 LAUA ANALYZER (Security Admin, Auditors, Managers) • Access by Security Class • Browser Based • MS Excel Output • Screen Access • Table Access • Conditional Logic • Data Security • User Profiles
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 RISK MANAGEMENT SOLUTIONS FOR LAWSON S3 LAUA ANALYZER (Security Admin, Auditors, Managers)
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY 9 CHANGE AUDIT • FEATURES • Utilizes Lawson Security 9 change audit files • Optional Export to MS Excel • Create PDF • Scheduled Email Notifications • Report Favorites
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY CHANGE AUDIT • TRACK CHANGES • User Attributes • User Assignments • Role Assignments • Security Class Assignments • Token Assignments • Function Code changes • Conditional Logic • Field Level Security
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY CHANGE AUDIT View
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 • SEGREGATION OF DUTIES (SoD) • The concept of having more than one person required to complete a task. In essence, SoD implements an appropriate level of checks and balances upon the activities of individuals. • Purpose: Identifies potential security violations • Target Audience: Internal & External Auditors, Security administrators • Technology: Browser UI for creating and viewing reports; HTML output • Advantage: Kinsey delivers 192 policies, 2,200+ rules
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SEGREGATION OF DUTIES DEFINITION
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SEGREGATION OF DUTIES(SOD) • Policy Violations by User • Browser Based • HTML Output • 192 Policies Provided • Over 2,200 Rules • Email Notifications • Policy Ratings • Policy Testing • Role Testing • Saved Reports • Create Unlimited Policies • Validates either LAUA or LS9
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SEGREGATION OF DUTIES DEFINITION
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SEGREGATION OF DUTIES REPORT Video
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 • ACTIVITY MONITOR (Listener) • Purpose: Tracks all user activity in Lawson S3 applications for audit and performance measuring. • Target Audience: Internal & External Auditors, Security administrators, Department managers. • Technology: Browser UI for creating and viewing reports; HTML output
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 • ACTIVITY MONITOR (Listener)
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 ACTIVITY MONITOR • Real Time Continuous User Activity Monitoring • Browser Based • Portal Activity • LSO Activity • MS Add-in Activity • First/Last Screen Used • Total Screens Used • Total Transactions Processed • Screen Usage Detail • Restrict Screen Access • Transaction Auditing Optional Interface
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 ACTIVITY MONITOR
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 • TRANSACTION AUDITING • Purpose: Transaction auditing provides the ability to track who has changed or viewed any information in Lawson’s S3 applications and indentify the user and data affected. • Target Audience: Internal & External Auditors, Security administrators, Department managers • Technology: Browser UI for creating and viewing reports; HTML output; exportable to MS Excel or PDF
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 TRANSACTION AUDITING
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 TRANSACTION AUDITING - SETUP • Audit Definitions • Product Line • User Name • Screen Name • Function Code • IP Address • Time Range • Retention Policies
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 TRANSACTION AUDITING - SETUP
COMPLEMENTARY SOLUTIONS FOR LAWSON S3 TRANSACTION AUDITING –REPORTING
Complementary Solutions for Lawson S3 CONTACT Guy Henson Kinsey & Kinsey, Inc 26. N Park Boulevard Glen Ellyn, Illinois 60137 630-858-4866 g.henson@kinsey.com Visit us at: www.kinsey.com