Hi all
Is anybody using Strongpoint?
<https://ww...
# generalr
Ricky
05/26/2022, 7:52 AMHi all
Is anybody using Strongpoint?
https://www.strongpoint.io/netsuite-usecases
e
Eric B
05/26/2022, 4:08 PMWe're using StrongPoint.
r
Ricky
05/26/2022, 4:16 PMHow do you find it Eric for executing the UAT in a Netsuite implementation
Ricky
05/26/2022, 4:16 PMThanks
e
Eric B
05/26/2022, 5:35 PMDid you mean UAR (User Access Review)?
j
jen
05/26/2022, 6:33 PMHey @Eric B, we are negotiating for a licence with Strongpoint. Can I ask what your use case is for it, what you think makes it worthwhile and what you think it’s lacking? Also what tier are you on?
e
Eric B
05/26/2022, 7:16 PMHi @jen I believe we're on the premium tier which works great for us since StrongPoint was able to hand-hold us through the process. We needed it for SOX compliance and SOD conflict resolution in preparation for going public. The initial recommendation was another software to handle SOD conflicts and we went with StrongPoint because it runs natively in Netsuite versus the other approach which was to pull data from NS and then manage it in a separate external portal. The main advantage we get from having StrongPoint is a real-time engine that helps monitor both SOX compliance and SOD conflicts. And because it's in real-time, we don't need to prepare reports for documentation and evidence purposes.
Eric B
05/26/2022, 7:24 PMThere are so many more other advantages like ERD where you can search for a control, a saved search, etc and view the ERD to find out what other parts are affected. With a sandbox we've been able to preview say a permission or role level change before deploying it in production because StrongPoint would flag it as an SOD conflict in sandbox.
Eric B
05/26/2022, 7:24 PMWe also get the benefit of managing change as either compliant or non-compliant and resolve non-compliant changes.
j
jen
05/26/2022, 7:26 PMThese are exactly the sorts of things we thought it would be handy for. It’s tough as nobody here has experience with it so it’s hard to tell the true value. We are rolling NetSuite out from our small company of ~40 people (was 7 when I joined 5 years ago), to the larger team of ~300.
jen
05/26/2022, 7:26 PMgoing from just me doing all the admin to obviously a larger more complex permissions/roles set etc
jen
05/26/2022, 7:27 PMThanks for the info
👍 1
e
Eric B
05/26/2022, 7:30 PM@jen I would definitely start with cleaning up roles and permissions since native Netsuite role setup isn't really geared for SOX compliance and SOD conflict mitigation. C-Suite people with the CEO and CFO roles don't really need anything more than view only access. I'd start with those and get it ready. That's really where the challenge is and much of the grunt work.
Eric B
05/26/2022, 7:31 PMI created a script that allows for mass assigning/changing permissions for roles
j
jen
05/26/2022, 7:33 PMoooh nice
jen
05/26/2022, 7:33 PMI have a role / permissions audit tool so I can basically generate a spreadsheet of everything
jen
05/26/2022, 7:34 PMexcept I’m not sure how to clean up field-level permissions, and also the whole Custom Record business
jen
05/26/2022, 7:34 PMI didn’t realise you could change permissions via script, taht will be handy
e
Eric B
05/26/2022, 7:35 PMyes it was a real time saver especially when you have a ton of roles and permissions to change and a looming deadline!
Eric B
05/26/2022, 7:36 PMAnd if you're using JIRA, StrongPoint has an integration that works with JIRA so that you don't need to do double entry for the ITGC management records.
Eric B
05/26/2022, 7:43 PMIn terms of what's lacking it's all really subjective. For example, an ITGC request doesn't have an in-between status from Approved to Complete. The use case is after performing the change, it may need to take a while to Complete (close out) the approved ITGC request because you may need feedback that the change you performed worked as expected. So it's a bit hard to track the ones that have been worked on versus the ones that have been approved and not worked on since the only status after Approved is Complete.
3 Views