Resources and Links
Oracle Users Best Practices Board

Oracle Apps Internal Controls Repository
Industry-leading best practices and analysis can be found by joining the Internal Controls Repository forum for end users only.

Oracle Resources
  • Best Practices for Securing Oracle E-Business Suite - Oracle's recommendations for securing your E-Business Suite can be
    found at Metalink's Note 189367.1.  R12 version 403537.1.
  • Critical Data Protection and Security in Oracle E-Business Suite - presentation
  • Script to Check for Default Passwords Being Used for Common Usernames - Metalink Note: 227010.1 (note script is not
    comprehensive - see blog)

LinkedIn Groups hosted by ERP Risk Advisors
Oracle GRC LI Group
Oracle ERP Auditors LI Group

AuditNet Resources for Oracle -
Here is a link to AuditNet's Oracle resource page.

Documentation on how to standardize Password Expiration via Forms Personalization
Here is a document outlining the steps to default the password expiration on the Users form using Forms Personalization.  Thanks to
Brent Hanke, Michael Dennis, and Carolyn Walker from Meredith Corporation for providing this information.

Application Security Presentations from Solution Beacon
Solution Beacon security presentation
Solution Beacon R12 security presentation

Integrigy Resources

Ashok Subramanian Resources
One of the original author's of Oracle's Best Practices for Securing your E-Business Suite document (Metalink Note 189367.1).  
GRC Blog; Tech Tips Blog

Internal Controls Surveys:
  • In 2008 we completed a survey on the usage of UMX and provided valuable feedback to Oracle.  End user companies can
    request the results of this survey by using the contact  form here.
  • Surveys on Internal Controls and Security issues for companies running Oracle Applications.  Results can be downloaded here.  
  • SQL Forms survey - closed.  Results can be requested here.

Here are a few other websites that may be helpful to you:
COSO Website
Massachusetts privacy legislation
Australia Regulation Task Force findings
CobiT info from ISACA and ITGI
AICPA Sarbanes Oxley Implementation Central
Oracle Applications User Group
CFO.com Sarbanes-Oxley Articles
SOX info from The Institute of Internal Auditors
IIA Global Technology Audit Guides  
SOX Act PDF file from PCAOB website  
Solution Beacon's public access vision instances
CPE
About Us
ERP Seminars is now ERP Risk Advisors!  You will be re-directed to our new site in a
few seconds...
or you can check out our new website at www.erpra.net.