Oracle Segregation of Duties: Why Access Reviews Miss Finance Risk
This article argues that a periodic Oracle access review can be completed correctly and still leave a finance process exposed. The weakness appears when each role is evaluated in isolation, while the combination of roles, inherited privileges, temporary access, and delayed removals permits a user to initiate and approve parts of the same sensitive process.