Configuration Risk Assessment
Configuration Risk Assessment helps to identify, assess, and monitor configuration-level risks across their Oracle Fusion environment.
It analyses ERP-configurations to detect settings that may introduce audit, compliance, or operational risks.
Eg: configuration gaps that could enable unauthorised changes, override controls, or weaken governance across finance, procurement, etc, modules.
Features
- Flags Anomalies in Oracle ERP Configurations
- Single Sign-On
- Download Free Summary Reports
- Analyse 100+ Configuration Risks for each Business Unit
- Excel format Reports Generation
Benefits
- Mitigates Configuration Risks in ERP Systems
- Proactive Mitigation
- Save Time with Real-time Access
- Manage Multiple Oracle ERP/SCM/HCM Pods
- Save time through Automation
- Ensure Flawless Configurations
- Proactively Mitigate Risks before they occur
Pricing
- Education pricing available
- Free trial available
Service documents
Request an accessible format
Framework
G-Cloud 15
Service ID
6 9 2 3 1 7 8 1 3 9 3 1 1 6 2
Contact
SAMKIT INFOSYSTEMS LTD
Atul Jain
Telephone: +447981672199
Email: atul.jain@samkit.co.uk
About your service
- Service categories
-
Application Development and Deployment
Data management
Database management systems
- Relational Database Management Systems
Database administration and development
- Database Administration
Data integration and intelligence
- Data Access Infrastructure Software
- Multi cloud support
- No
Service scope
- Software add-on or extension
- No
- Cloud deployment model
- Hybrid cloud
- Service constraints
- Windows-based Application
- System requirements
-
- .NET Framework Version 4.8
- Minimum 4GB Free RAM
- Minimum 150MB HDD Space
- Windows 10 and above
User support
- Email or online ticketing support
- Yes
- Support response times
- Within 24 Hours
- User can manage status and priority of support tickets
- No
- Phone support
- Yes
- Phone support availability
- 9 to 5 (UK time), 7 days a week
- Web chat support
- No
- Onsite support
- Yes, at extra cost
- Support levels
- Free Email and Phone Support is included with License Cost covering any problems or guidance/training necessary.
- Support available to third parties
- Yes
Onboarding and offboarding
- Getting started
- Online Training and User Documentation (Guide)
- Service documentation
- No
- End-of-contract data extraction
-
No User Data is saved in cloud.
Complete data is stored locally on user's PC/Laptop - End-of-contract process
- Licenses are issued annually and after expiration the user will be unable to connect to their environment using our application.
Using the service
- Web browser interface
- No
- Application to install
- Yes
- Compatible operating systems
- Windows
- Designed for use on mobile devices
- No
- Service interface
- No
- User support accessibility
- None or don’t know
- API
- No
- Customisation available
- No
Scaling
- Independence of resources
- Application runs locally on Users' systems connecting only to their Oracle Fusion ERP Environment
Analytics
- Service usage metrics
- Yes
- Metrics types
- Last Login Report
- Reporting types
-
- Regular reports
- Reports on request
- Resource tagging
- No
- FOCUS resource tagging
- No
Resellers
- Supplier type
- Not a reseller
Staff security
- Staff security clearance
- Conforms to BS7858:2019
- Government security clearance
- None
Asset protection
- Knowledge of data storage and processing locations
- No
- Datacentre security standards
- Managed by a third party
- Penetration testing frequency
- At least every 6 months
- Penetration testing approach
- In-house
- Protecting data at rest
- Encryption of all physical media
- Data sanitisation process
- Yes
- Equipment disposal approach
- In-house destruction process
- Data sanitisation type
- Explicit overwriting of storage before reallocation / Secure Erase
Data importing and exporting
- Data export approach
- Data is not exported.
- Data export formats
- Other
- Other data export formats
- N.A
- Data import formats
- Other
- Other data import formats
- N.A
Data-in-transit protection
- Data protection between buyer and supplier networks
- Legacy SSL and TLS (under version 1.2)
- Data protection within supplier network
- Legacy SSL and TLS (under version 1.2)
Availability and resilience
- Guaranteed availability
- N.A
- Approach to resilience
- N.A
- Outage reporting
- Email Alerts
Identity and authentication
- User authentication needed
- Yes
- User authentication
- Username or password
- Access restrictions in management interfaces and support channels
- License Validation
- Access restriction testing frequency
- At least every 6 months
- Management access authentication
- Username or password
Audit information for users
- Access to user activity audit information
- No audit information available
- Access to supplier activity audit information
- No audit information available
- How long system logs are stored for
- User-defined
Security governance
- Named board-level person responsible for service security
- Yes
- Security governance certified
- Yes
- Security governance standards
- ISO/IEC 27001
- Information security policies and processes
- Data Encryption and timely sanitation
- Software Security Code of Practice
- Yes
Operational security
- Configuration and change management standard
- Supplier-defined controls
- Configuration and change management approach
- N.A
- Vulnerability management type
- Supplier-defined controls
- Vulnerability management approach
- N.A
- Protective monitoring type
- Supplier-defined controls
- Protective monitoring approach
- N.A
- Incident management type
- Undisclosed
- Incident management approach
- N.A
- Post-quantum cryptography secure
- No
Secure development
- Approach to secure software development best practice
- Independent review of processes (for example CESG CPA Build Standard, ISO/IEC 27034, ISO/IEC 27001 or CSA CCM v4.0)
Public sector networks
- Connection to public sector networks
- No
Pricing
- Discount for educational organisations
- Yes
- Free trial available
- Yes
- Description of free trial
- 15 Days Free Trial
- Link to free trial
- https://samkit.co.uk/configuration-risk-assesment/
Discount percentage by annual call-off contract value (excluding VAT)
- Less than £250,000
- 2.5%
- Between £250,000 and £500,000
- 5%
- Between £500,001 and £1,000,000
- 7.5%
- Between £1,000,001 and £2,500,000
- 10%
- Between £2,500,001 and £5,000,000
- 12.5%
- Over £5,000,001
- 15%
Non-mandatory Standards and certifications
- ISO/IEC 27001 certification
- Yes
- Who accredited the ISO/IEC 27001
- QFS MANAGEMENT SYSTEMS LLP
- ISO/IEC 27001 accreditation date
- Wednesday 26 November 2025
- What the ISO/IEC 27001 doesn’t cover
- All our services are covered under this certification.
- ISO 28000:2022 certification
- No
- ISO 9001 certification
- Yes
- Who accredited the ISO 9001 certification
- QFS MANAGEMENT SYSTEMS LLP
- ISO 9001 accreditation date
- Wednesday 26 November 2025
- What the ISO 9001 doesn’t cover
- All our services are covered under this certification.
- Quality management systems (QMS)
- No
- CSA STAR certification
- No
- PCI certification
- No
- Cyber essentials
- Yes
- Please provide your Cyber Essentials Certificate Number
- 1909dff2-3f20-414e-9da9-94f0f2359eb9
- Cyber essentials plus
- No
- Cyber Essentials Alternative
- None of the criteria
- Other security certifications
- No
Social value
- Section B - Commitment for Future: Delivery
-
-
Mission: Kick start economic growth. To secure the highest sustained growth in the G7 - with good jobs and productivity growth in every part of the country making everyone, not just a few, better off.
Policy Outcome 1: Fair work: That offers fair wages and good working conditions. Help people get a job, stay in work, and progress in their careers, with good employment opportunities across the country. Notes: Where there is a large proportion of labour costs in the contract, commercial teams should consider MAC in Outcome 1 as a priority
- New or retained jobs on the contract workforce in the relevant area that meet the criteria set out in MAC 1b, 1c and 1d
- New apprenticeships on the contract workforce in the relevant area that meet the criteria set out in MAC 1b
- Providing opportunities for, and measuring and monitoring of, staff workforce conditions over time, including employee engagement, involvement in decision-making and satisfaction and adapting to any changes in the results, with clear processes for acting on issues identified
- Ensuring new workers are informed of their right to join a trade union
- Payment of more than the National Minimum Wage or National Living Wage (as appropriate) to the contract workforce
- Monitoring and reporting of gender and ethnicity pay gaps and plans to address them where necessary
- Entitlement to sick pay for the contract workforce, with provision in place for any staff who do not meet the earnings threshold for statutory sick pay, payment of sick pay from day one of absence and payment of staff on the contract workforce who are off sick a replacement income of 100% of their usual earnings for as long as possible
- Plans for an appropriate income replacement policy for staff who are required to spend time away from work to care for a sick dependent or close relative
-