Fastpath Assure

Segregation of Duties | Access Reviews

The Segregation of Duties (SOD) module includes a ruleset out-of-the box, built specifically for NetSuite by our team of certified auditors. With over 125 conflicts in the ruleset, you can easily add to and customize it for your specific needs. Each conflict can be assigned a risk level and business or IT activities with groups of permissions.

• Extensive list of SOD conflicts specifically designed for NetSuite.
• SoD Analysis can be performed by user, role, or permission.
• Out-of-the-box ruleset that is easily customizable.
• Assists in Sarbanes-Oxley (SOX) compliance in NetSuite.
• Simple to review and sign-off on mitigating controls.

Access Reviews 
With an out-of-the-box report, you can quickly analyze who has access to critical data at a granular level to reduce the resources and time needed to conduct these reviews regularly.

• Understand potential SOD risks before granting approval.
• Security reporting by user, role, and permission.
• Define custom report schedules (daily, weekly, monthly.)

Identity Manager | Access Certification

Identity Manager streamlines user access requests and approvals without IT involvement. Requests made in Identity Manager go through a customizable workflow of approvers based on the permissions requested and who is requesting them.

• Compliant user provisioning in NetSuite.
• Streamlined approval process.
• Easily analyze access requests for conflicts with our SOD module.
• Visibility into SOD risks during requests and approvals with Assure integration.
• Schedule Start and Stop times for Emergency/Temporary access.

Fastpath Assure Access Certifications module allows companies to schedule periodic reviews and signoff for different types of access: Business Process, Conflict, Critical Access, Product, and Role Assignment access. Access Certifications ensure that users are only provided the access privileges required to perform their job functions. For each review type, users can set up reviews by the objects or by the reviewers.

• Schedule certifications – Define owners of the access type for review and schedule reviews for both full access reviews and rolling access reviews.
• Document reviews – All reports can be scheduled and signed from the report window. This record can be filtered by name, date, and signing user.
• Audit reports – Generate reports showing access review and certifications for internal and external audits.
• Notify Audit or Security teams upon certification.

Audit Trail

Through the Audit Trail functionality, companies can focus on the highest risk business objects and attributes to continuously monitor changes. Leveraging the auditor-designed templates included in the module, tracking critical changes is simple and straightforward with minimum impact to system performance.

• Ability to track all critical setup and configuration changes made to NetSuite.
• Standard Audit Trail templates make implementation quick for immediate ROI.
• Review and sign-off on changes.
• Capture before and after values, including items that have been deleted.
• Automate with custom report schedules (daily, weekly, monthly) and send via Excel or PDF.

Security Designer

Simulate changes to your security model and test them for segregation of duties conflicts prior to deployment with Fastpath Assure Security Designer. Create different models and within them change security based on subsidiaries, users, and permissions. The analyses are performed based on your current system vs. the potential model and tells the differences between the two.

• Prepare and test new security models before deployment.
• Create, edit, and delete role configurations.
• Automatic segregation of duties analysis of model changes. 
• Assists in Sarbanes-Oxley (SOX) compliance in NetSuite.

Risk Quantification

Fastpath Assure uses NetSuite transaction data to quantify the financial exposure of segregation of duties conflicts in your NetSuite environment. This valuation helps auditors focus in on key areas according to the potential monetary impact to your organization. Fastpath can present the data by conflict or by user and provides dynamic drill-down reporting into the transactional details. 

• Focus access and conflict analysis based on financial exposure.
• Easy, standardized implementation.
• Reduce SOD Audit time by up to 80%.