Search

Businesses, regardless of size, grapple with the formidable task of securing data and systems. A key part of this involves managing elevated access: the permissions afforded to certain users who hold authority to induce significant changes in the IT environment. These individuals, referred to as privileged (or elevated) users, regularly interact with sensitive information and…

In July 2023, the U.S. Securities and Exchange Commission (SEC) introduced new cybersecurity incident disclosure rules, aiming to enhance cybersecurity transparency and mitigate risks for investors. With the introduction of these stringent rules, companies are under increasing pressure to ensure robust data protection measures. These regulations, while posing challenges, also present opportunities for organizations to improve their cyber resilience and establish proactive incident reporting…

Ensuring that the right people have access to the right resources at the right time is a crucial component not just of employee productivity but also organizational security. Known as “IAM,” Identity and Access Management provisioning and deprovisioning are two fundamental processes that play a crucial role in organizational security. With most cyberattacks resulting from…

PeopleSoft is an extremely powerful system for HCM, Financial, and Campus operations – but notoriously, PeopleSoft is also seen as a black box when it comes to understanding user behaviour. With native logging that was designed for troubleshooting system issues, to limited access control via role-based controls – PeopleSoft systems fundamentally lack the granular visibility…

SAP published thirteen new and four updated Security Notes for May 2024 Patch Tuesday. Compared to April’s SAP Security Patch Day release, this month’s release contains more patches overall and with higher severity. Three Security Notes received the HotNews maximum priority rating (CVSS scores ranging from 9.0 to 10.0). Two of the HotNews notes are new, and one is…

The current regulatory compliance and cyber threat landscape is constantly shifting. With the rise in data breaches and stringent regulatory compliance mandates, coupled with digital transformation projects like S/4HANA migrations, securing sensitive information within SAP systems is more critical than ever. Did you know that a whopping 80% of data breaches involve unauthorized access to…

Navigating compliant provisioning using manual processes is a challenging task for most administrators. They spend hours determining if a request for a new role is appropriate or if the request will create unacceptable business risks. Even more time is spent finding, creating, or assigning suitable mitigations if a risk is acceptable and routing and managing…

Oracle’s Governance, Risk, and Compliance (GRC) suite has been widely used across enterprises for several years. It has helped businesses streamline the identification of access control risks and alleviate the burden of manual control testing. However, Oracle has announced the end of support for Oracle GRC by May 2025. With the sunset date hardly a…