Complementary Solutions for Lawson S3 MONITORING AND AUDITING FOR LAWSON S3 N o ve m be r 2 0 1 3 P re s e nte d by D an Ki n s ey Complementary Solutions for Lawson S3 AGENDA o KINSEY OVERVIEW o SOLUTIONS o ACTIVITY MONITOR o TRANSACTION AUDITING o LIVE DEMO C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 O U R BAC KG RO U N D • Founded in 1983 by Dan and Brad Kinsey, Kinsey has provided software sales, implementation, support and development for over 30 years. • Infor-Lawson reseller and implementation partner since 1997 • Infor-Lawson Certified Systems Integration Partner • Infor-Lawson Complementary Software Partner • Infor-Lawson’s “Go to” Reseller/Implementer for Public Sector • Provided product and services to over 120 Lawson customers • 2 time Partner of the Year C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 Transaction Auditing LS9 Reporting LAUA Security Reporting LS9 Auditing LAUA Security Auditing LS9 Segregation of Duties (SoD) LAUA Segregation of Duties (SoD) Activity Monitor C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 A C T I V I T Y M O N I T O R (Listener) Purpose: Monitors all user activity in Lawson S3 applications for audit control and performance measuring. Target Audience: Internal & External Auditors, Security administrators, Department managers. Technology: Utilizes WebSphere in real-time to update activity in MySQL, MSSQL or Oracle. Reporting: Browser UI for creating and viewing reports; Excel pivot tables; Security Dashboard for metadata. C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 A C T I V I T Y M O N I T O R (Listener) C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 ACTIVITY MONITOR Real Time Continuous User Activity Monitoring o o o o o o o o o o Portal Activity Smart Office Activity MS Add-in Activity First/Last Screen Used Total Screens Used Total Transactions Processed Screen Usage Detail Screen Access Restrictions Multiple Reporting Methods Transaction Auditing Optional Interface C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 ACTIVITY MONITOR C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 ACTIVITY MONITOR C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 ACTIVITY MONITOR Use MS Excel to view all summary activity by user-form, by user-system code or to create performance graphs. Drill on any cell to see the detail. C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 ACTIVITY MONITOR • Real-Time Portal, Smart Office, MS Add-in Monitoring • Current and Historical Activity • Reports Delivered through your Browser or Microsoft Excel • Includes User, Form, Function Code, Date, Time, Form Keys • Optional Restriction Scheduling • Optional Interface to Transaction Auditing Data C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 TRANSACTION AUDITING Purpose: Transaction auditing provides the ability to track who has changed or viewed any information in Lawson’s S3 applications and indentify the user and data affected. Target Audience: Internal & External Auditors, Security administrators, Department managers Technology: Utilizes WebSphere in real-time to update activity in MySQL, MSSQL or Oracle. Reporting: Browser UI for creating and viewing reports; HTML output; exportable to MS Excel or PDF C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 TRANSACTION AUDITING C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 TRANSACTION AUDITING - SETUP Audit Definitions o Product Line o User Name o Screen Name o Function Code o IP Address o Time Range o Retention Policies C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 TRANSACTION AUDITING - SETUP C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 TRANSACTION AUDITING - REPORTING Audit Data o Product Line o User ID associated with the transaction o Origination System IP address o Product Line o Screen name o Function Code o Reason Code o Transaction Date o Transaction Keys o Field Names o Field Values (Before & After) C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 TRANSACTION AUDITING – REPORT CRITERIA C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 TRANSACTION AUDITING – REPORTING C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 T R A N S A C T I O N A U D I T I N G – H R / PAY R O L L E X A M P L E S Employees and managers can enter education and certification information in to Self Service but there is no audit. The HR staff needs to verify that the employee really received the education, skill, etc. Forms to audit: PA20.1 PA21.1 PA22.1 Education Competencies Certification Provide the ability to audit changes made to time records that come in from a workforce management system such as Kronos or Workbrain. This would include an deletions to time records. Forms to audit: PR35.1 Time Entry C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 TRANSACTION AUDITING – FINANCE EXAMPLES In GL when setting up the company there is an option to allow JE’s to be Unposted and Unreleased prior to closing the month. If you do this there is no evidence the JE ever existed. Forms to audit GL45.1 provides the option to Unpost & Unrelease GL40.1 provides the option to delete the entry Along the same lines you can open a closed GL period for back posting which also has no audit trail. Forms to audit GL10.1 GL10.2 Company Backposting Control C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 TRANSACTION AUDITING – FINANCE EXAMPLES In Cash Ledger there are no audits for any cash transaction entry which can include Deposits, Transfers and Bank Transactions including Payment Entry. This lets you enter a payee without having a vendor to create a check. Forms to audit CB10 CB15 CB20 CB55 Deposits Transfers Bank Transactions Payment Entry Also in Cash Book would be Bank Transaction Adjustments which is used to reconcile payments, set them as void, stop payment, etc. Form to audit CB80 Bank Transaction Adjustment C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 TRANSACTION AUDITING – CONTROL EXAMPLES Transactions for a specific group of users (i.e. Internal Lawson Support Group) All Lawson set-up forms Time based transactions Transaction originating from a specific IP Address Healthcare Patient’s name is on a requisition Employees are also patients C O M P L E M E N TA R Y S O L U T I O N S F O R L A W S O N S 3 MONITORING AND AUDITING LAWSON S3 ACTIVITY MONITOR vs. TRANSACTION AUDITING Feature User ID IP Address Date/Time Product Line Application Form ID Function Code Keys Report Writer MS Excel Output Manager Restrictions Field Level Data Before and After Changes Report Scheduling Licensing Restrictions AM Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No No No No TA Yes Yes Yes Yes Yes Yes Yes Yes Yes Yes No Yes Yes Yes Yes Complementary Solutions for Lawson S3 DEMO link Complementary Solutions for Lawson S3 WEBCAST PROMOTION E nte r in to a Pro o f o f C o n c e pt a g re e me nt p rio r to M a rc h 1 , 2 0 1 4 an d rec eive a n o - ob ligat ion 3 0 d ay t rial version . • • • • • • • Non-Production Environment (DEV/TEST) Product will be billed upon acceptance of trial Requires 2 days of remote installation services to be billed upon acceptance of trial Requires a virtual server to be provided by customer Available for Portal and Microsoft Add -in transactions Promotion not available for hosted applications Trial period must begin no later than July 1, 2014 Complementary Solutions for Lawson S3 C O N TA C T Guy Henson Kinsey & Kinsey, Inc 26. N Park Boulevard Glen Ellyn, Illinois 60137 630-858-4866 g.henson@kinsey.com Visit us at: www.kinsey.com