Oracle buys LogicalApps: Approva Remains the Land of Freedom

(The following is also available over at Approva’s Audit Trail.)

The deal has been announced and will finally be done in November. Nobody is particularly surprised that Oracle is buying LogicalApps, least of all, us here at Approva. With this transaction Oracle will now have a controls automation tool needed to continue its fight with SAP. Analysts, bloggers, and prospective customers have asked: where does this leave Approva and the answer is – exactly where we want to be: Approva remains the independent controls monitoring company – and the only one with the proven ability to work across applications, in multiple platforms and for any kind of control.

Oracle (and similarly SAP) are taking the approach of strongly tying and embedding their controls monitoring tools in their ERP packages. What’s wrong with this approach? It is fundamentally too limited in scope and vision. Yes, managing controls in ERP systems is critical, especially in a SOX world. But, a tool that scopes controls automation down to SoD analysis for a specific ERP package (and, for that matter, a specific version therein) can only provide a keyhole view and doesn’t truly serve the GRC needs of the enterprise. Since LogicalApps only addressed Oracle E-Business Suite, with this acquisition Oracle continues to neglect its red haired step children: PeopleSoft, JD Edwards, Hyperion, Siebel… where’s the controls love for them?

Part 3 of my compliant provisioning series

The final installment of my series on compliant provisioning is up on Audit Trail.

For those of you headed to Digital ID World, let me know and we can catch up. (I’m looking at you members of the Mark MacAuley supper club.)

Partial automation is equivalent to partial deployment

Part two of my three part series on Audit Trail.

Hardwired entitlements lead to brittle provisioning

Part one of my thee part series over at Audit Trail on the challenges of provisioning complex, core business systems.

A Simple Description of User Provisioning

I have a bad habit.  (Well, there’s a lot of those, but we don’t have time for that.)  I tend to come up with really great explanations for things and a) forget to write them down and b) forget what I said in the first place.  The same thing tends to happen when I write a blog entry or whitepaper… I go back and look at it and think “Wow!  How did I ever come up with that?”  Recently, I came up with an easy to follow explanation of user provisioning.  This time, for once, someone actually captured it so I can reuse it.  And better still, it was videotaped: Introduction to Identity Management and User Provisioning via Approva’s Audit Trail