Sub Material Fraud Risk: The Elephant in the Room
by Jeffery T. Hare

Auditing Oracle Security The IT Audit, Vol. 7, April 15, 2004
This article discusses various aspects of Oracle security that must be considered, including secured installation, initialization parameters, users and profiles, roles, object and system privileges, logging, listener security, etc.

Sarbanes-Oxley Best Practices in an Oracle Applications Environment by Jeffrey T. Hare, CPA
Sarbanes-Oxley Compliance in an Oracle Applications Environment: Round 2 by Jeffrey T. Hare, CPA
Super User Access Best Practices by Jeffrey T. Hare, CPA
SOX Challenges: System Administration at Small Companies by Jeffrey T. Hare, CPA
Active Monitoring of Segregation of Duties, Not Optional by Jeffrey T. Hare, CPA
Beyond the Obvious for Segregation of Duties by Jeffrey T. Hare, CPA, Tony Tarantino, Ph.D., CPM, CPIM
 

Audit Programs (Subscription required)

Oracle Audit Checklist (9/1/03)

Oracle Audit Program
Oracle Database Audit Program
Oracle Database Audit Program (Sep 07)
Oracle Database Audit Program (Sep 04)

Oracle DBMS-Manufacturing (Mar 06)

Oracle Financial Applications Audit Guidelines (Oct 05)

Oracle Financial Applications Checklist-Banking (Apr 06)

Oracle Financial System (Sep 07)

Oracle Application Audit (Word) (PDF)
Oracle Database Auditing

Oracle DB Technical Audit Program

Oracle Financials Security Checklist

Oracle Infrastructure Audit (Word) (PDF)
Oracle Inventory Audit

Oracle Security Guide

Oracle Internal Controls Repository

Join the oracleappsinternalcontrols · Oracle Apps Internal Controls Repository

1. Auditing Oracle Applications Primer for Internal Auditors
2. Oracle: Accessing the Oracle Apps DB Without Having a DB Login
3. Oracle: Auditing Application Controls
4. Oracle: Risk Based Assessment of UAC and SOD White Paper
5. Oracle: Best Practices for Bank Account Entry and Assignment
6. Oracle: Journal Approval Best Practices