Complementary Solutions for Lawson S3

1. Complementary Solutions for Lawson S3 GREAT LAKE USER GROUP PRESENTATION October 18,2003 Presented by Dan Kinsey

2. Complementary Solutions for Lawson S3 • PRODUCT OVERVIEW • SECURITY DASHBOARD • ACTIVITY MONTITOR • TRANSACTION AUDITING • SECURITY MIGRATION

3. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 Transaction Auditing LS9 Reporting LAUA Security Reporting LS9 Auditing LAUA Security Auditing LS9 Segregation of Duties (SoD) LAUA Segregation of Duties (SoD) Activity Monitor

4. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 REPORTING • SECURITY REPORTS • Provides specific details on how your security model is built including all assignments for Users, Roles, Security Classes, Tokens and Attributes. • SECURITY ANALYZER • Built specifically for internal and external auditors this MS Excel based reporting shows screen access by user in an easy to use format. • SECURITY AUDITING • The auditing feature reports on all changes to your security model utilizing Lawson’ security audit data.

5. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 REPORTING • Purpose: Provides reports to auditors and security administrators on what access a user has to the Lawson S3 applications or what settings have been changed. • Target Audience: Anyone responsible for monitoring security (Internal & External Auditors, Security admin, Department managers.) • Technology: Browser UI for creating and viewing reports; exports to Excel for working off-line or printing. • Advantage: More delivered reports, does not require LBI or Crystal, advanced filtering and grouping.

6. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 DASHBOARD

7. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY 9 REPORTING (Security Administrators) • FEATURES • Report on • Users • Roles • Security Classes • Tokens • Attributes • Fields • Groups • Tables • Programs • Categories • Hierarchical Drills • Role down to Security Class • Role up to Users • Security Class down to Tokens • Security Class up to Roles • Dynamic Grouping • On-the-fly Sorting • On-the-fly Filtering • Export to MS Excel

8. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY 9 REPORTING (Security Administrators)

9. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY 9 REPORTING (Security Administrator) Video ACCT Role | Security Class User | Role AbsenceManagement1 Role | Security Class Security Class | Token

10. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY 9 ANALYZER (Auditors, Managers) • Access by User • Browser Based • MS Excel Output • Screen Access • Table Access • Program Access • Field Access • Conditional Logic • Filter by User • Filter by Role • Filter by Sys Code

11. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 RISK MANAGEMENT SOLUTIONS FOR LAWSON S3 SECURITY 9 ANALYZER (Auditors, Managers) ViewVideo

12. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 RISK MANAGEMENT SOLUTIONS FOR LAWSON S3 LAUA ANALYZER (Security Admin, Auditors, Managers) • Access by Security Class • Browser Based • MS Excel Output • Screen Access • Table Access • Conditional Logic • Data Security • User Profiles

13. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 RISK MANAGEMENT SOLUTIONS FOR LAWSON S3 LAUA ANALYZER (Security Admin, Auditors, Managers)

14. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY 9 CHANGE AUDIT • FEATURES • Utilizes Lawson Security 9 change audit files • Optional Export to MS Excel • Create PDF • Scheduled Email Notifications • Report Favorites

15. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY CHANGE AUDIT • TRACK CHANGES • User Attributes • User Assignments • Role Assignments • Security Class Assignments • Token Assignments • Function Code changes • Conditional Logic • Field Level Security

16. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SECURITY CHANGE AUDIT View

17. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 • SEGREGATION OF DUTIES (SoD) • The concept of having more than one person required to complete a task. In essence, SoD implements an appropriate level of checks and balances upon the activities of individuals. • Purpose: Identifies potential security violations • Target Audience: Internal & External Auditors, Security administrators • Technology: Browser UI for creating and viewing reports; HTML output • Advantage: Kinsey delivers 192 policies, 2,200+ rules

18. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SEGREGATION OF DUTIES DEFINITION

19. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SEGREGATION OF DUTIES(SOD) • Policy Violations by User • Browser Based • HTML Output • 192 Policies Provided • Over 2,200 Rules • Email Notifications • Policy Ratings • Policy Testing • Role Testing • Saved Reports • Create Unlimited Policies • Validates either LAUA or LS9

20. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SEGREGATION OF DUTIES DEFINITION

21. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 SEGREGATION OF DUTIES REPORT Video

22. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 • ACTIVITY MONITOR (Listener) • Purpose: Tracks all user activity in Lawson S3 applications for audit and performance measuring. • Target Audience: Internal & External Auditors, Security administrators, Department managers. • Technology: Browser UI for creating and viewing reports; HTML output

23. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 • ACTIVITY MONITOR (Listener)

24. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 ACTIVITY MONITOR • Real Time Continuous User Activity Monitoring • Browser Based • Portal Activity • LSO Activity • MS Add-in Activity • First/Last Screen Used • Total Screens Used • Total Transactions Processed • Screen Usage Detail • Restrict Screen Access • Transaction Auditing Optional Interface

25. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 ACTIVITY MONITOR

26. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 • TRANSACTION AUDITING • Purpose: Transaction auditing provides the ability to track who has changed or viewed any information in Lawson’s S3 applications and indentify the user and data affected. • Target Audience: Internal & External Auditors, Security administrators, Department managers • Technology: Browser UI for creating and viewing reports; HTML output; exportable to MS Excel or PDF

27. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 TRANSACTION AUDITING

28. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 TRANSACTION AUDITING - SETUP • Audit Definitions • Product Line • User Name • Screen Name • Function Code • IP Address • Time Range • Retention Policies

29. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 TRANSACTION AUDITING - SETUP

30. COMPLEMENTARY SOLUTIONS FOR LAWSON S3 TRANSACTION AUDITING –REPORTING

31. Complementary Solutions for Lawson S3 CONTACT Guy Henson Kinsey & Kinsey, Inc 26. N Park Boulevard Glen Ellyn, Illinois 60137 630-858-4866 g.henson@kinsey.com Visit us at: www.kinsey.com