Couple of Quick Questions

Question

Good Morning,

We currently have an OBIEE 12c (12.2.1.2, with plans to update in DEC) implementation.   As this implementation is serving our Financial group it must be SOX compliant.    One of the requests from the auditors is for a detailed change report, meaning they would like to see

a report that list any changes to the environment over a given period, who made them and what the changes entailed.    So my question is can this be done?  Has anyone here ever had to do this for SOX compliance.  We are new to OBIEE and still working out the kinks and learning.

Any help would be greatly appreciated.

Next question, we currently use ADFS in Azure for a single sign on solution.  What are my options for integrated OBIEE with this?  Is it a simple configuration change or a more detailed process?

Thanks again in advance for any help or information that can be provided.

Bill

[Deleted User] · Answer

Thomas Dodds wrote:This is a management function not a technical function ... you need a SOX compliant way to ingest work into the BI team, a process for completing the work (or promoting user's creations) and documenting it. I've done many OBIEE and other BI engagements in SOX environments. Don't expect the technology to manage to SOX - especially with a move to self-service; it's unrealistic expectation.

Amen

Thomas Dodds · Answer

"One of the requests from the auditors is for a detailed change report, meaning they would like to see a report that list any changes to the environment over a given period, who made them and what the changes entailed.    So my question is can this be done?  Has anyone here ever had to do this for SOX compliance."

This is a management function not a technical function ... you need a SOX compliant way to ingest work into the BI team, a process for completing the work (or promoting user's creations) and documenting it.  I've done many OBIEE and other BI engagements in SOX environments.  Don't expect the technology to manage to SOX - especially with a move to self-service; it's unrealistic expectation.

On the ADFS side ... have you done any research on this?  5 seconds on Google got me:  https://support.oracle.com/knowledge/Enterprise%20Performance%20Management%20and%20Business%20Intelligence/2248571_1.htm…