BizRights: The Enterprise Controls Management Solution

Using BizRights makes compliance easier and more collaborative. But Consider understands smart managers want more from their compliance efforts than mere documentation. So, we define Enterprise Controls Management with an enterprise-wide perspective. It encompasses sophisticated detection techniques to uncover control problems, preventative assessments to avoid violations, operational analysis of configurations and transactions to ensure smooth operations, and an application-independent architecture that supports all this across multiple applications.

In BizRights, we’re delivering Enterprise Controls Management software that will take you far beyond the limits of simple control tracking. Most compliance solutions only address detection – reporting violations only when queried at a point-in-time. Approva is the first company to move beyond simple detection, delivering products that address the complete range of controls management tasks faced by companies today. Preventing violations, monitoring operations, even supporting systems and processes that incorporate applications from multiple vendors – BizRights delivers it all to produce the first Enterprise Controls Management solution.

With BizRights you’ll move past reactive, point-in-time audits to continuous monitoring of ERP system activity. You’ll be notified immediately of risky configuration settings, policy violations, and role conflicts so you can rectify problems quickly. Even better, you can avoid problems with a unique simulation analysis facility that reveals the downstream impact of permission changes – before they’re applied.

The most efficient controls reflect specific business and operational risks that vary between different functions. That's why we've partnered with finance and audit leaders to create detailed audit content ­ rules, tests, and mitigating controls ­ incorporated into rule books in the BizRights Business Controls Workbench. These rule books identify threats associated with specific business functions so you benefit from the industry's best audit and operational insights.

Finally, you can’t deliver Enterprise Controls Management unless you can visualize the entire enterprise. That’s why, from the beginning, we’ve built an application independent architecture that works with the industry’s predominant ERP applications. BizRights harnesses the power of Microsoft’s .NET platform to establish tight links to the broadest range of systems and applications.

 

Enterprise Controls Management
Requirement	BizRights Delivers
Detection	Collaboration enables all compliance stakeholders - executives, auditors, security staff, and others - to create, verify, and monitor business controls so appropriate individuals make decisions.
	Business rules continuously support detection of segregation of duties and access to sensitive transaction violations.
	Reporting and notification capabilities allow constant monitoring of compliance status and proactively alert managers to potential problems.
Prevention	Simulation analysis identifies the impact of proposed configuration or permission changes, preventing control violations.
	"Plain English" specification of business rules focuses attention on the aim of business controls, rather than implementation mechanics and specifics.
Operational Analysis	Rich content, in the form of pre-defined rules that reflect industry best practices, incorporated within rule books that are easily customized to address organizational needs. Robust controls eliminate surprises in operation of critical business systems.
	Customizable rules and examinations move tests beyond simple compliance, to encompass transaction and configuration monitoring, enabling detection of violations of business controls (such as selection of inappropriate suppliers, out-of-specification materials, etc.)
	360° Insight Analysis minimizes false positives by correlating user authorizations, application configurations, and transaction execution to eliminate “theoretical” and irrelevant violations, so you can focus on real problems.
Cross-Application Support	Application-independent architecture enables transparent and independent assessment of ERP activity across entire enterprise.
	.NET Web Services technology enables rapid integration of disparate vendor's applications and systems.

 

Click here for details on Consulting & Support Services.