D365 Finance & Operations and Dynamics AX Forum

Back to discussions
Expand all | Collapse all

FastPath Compliance Software

  • 1.  FastPath Compliance Software

    SILVER CONTRIBUTOR
    Posted Dec 10, 2020 06:22 PM
    I am considering the purchase of FastPath (Fastpath - SOX Compliance, Security, and Audit Solutions | G2 Winner (gofastpath.com)) to assist with license management, data audit, and segregation of duty review. I'm wondering if others in this group use this software or any similar that you would recommend.

    I'm interested in:
    1. Do you recommend it or would you tell me to stay away and why?
    2. How long did your initial implementation take from installation to training?
    3. How has your long term support been?
    4. What is the biggest value you have received from the product?
    5. What is the biggest issue you have had?

    ------------------------------
    Marc Rohde
    IT Director
    Andis Company
    ------------------------------
    Digital Acceleration Binge Day. January 28th 2021 | 11:00 AM - 2:00 PM EST


  • 2.  RE: FastPath Compliance Software

    Posted Dec 11, 2020 10:31 AM
    Edited by Kayla King Dec 11, 2020 10:32 AM
    Hi Marc,

    I've been a heavy user of FastPath's software for the 3+ last years, so while I can't speak specifically to the intricacies of the implementation (which preceded my involvement), I have been able to use the software robustly since and can speak to some of the features and support. Please see my overall feelings below, again noting that I'll withhold input on the second point.

    I would highly recommend the software. We primarily use the software for the SOD and audit trail functionalities and it's allowed us to easily get visibility on key areas of risk within our security environment, and provide reviewer friendly reporting to summarize those risks and identify the specific tables/menu items/objects that may be granting specific access (as an aside, we have a bit over 100 users in our AX implementation). Further, the audit trail functionality has been great in allowing us to track whenever changes are made to sensitive fields (allowing you to easily monitor changes to these fields or ensure that changes are made by only appropriate parties for example). The licensing reporting does seem useful as well, though my specific experience with utilizing that reporting is pretty narrow. Overall however, I'm impressed by the conciseness of the reporting with the time it saves around user reviews, as well as the improved controls it allows whether that be scheduled reporting around certain areas of access, or triggers to help track key changes in the environment.

    Long term support has been outstanding. Their team has jumped on calls with myself and our third party consultants to help walk us through set-up of new triggers/features, and I generally get a response if I need assistance from their support team within the hour. They've also come on site in the past to have discussions and help our audit team get more comfortable with the software. They're generally very flexible in terms of exploring new development opportunities if there's features you're looking for that don't exist at the time, and all in all, they've just been great partners to work with and very responsive to any needs or feedback.

    I think the biggest value we've gotten out of the software is time savings around security reporting (better quality reports that are available on demand as well as schedulable), as well as more visibility around our security role design and SOD situation. To the point, it's allowed us quicker and better reporting (in the sense that this reporting is no longer point in time comparison based) making for a stronger control environment while also saving us time.

    ------------------------------
    Kayla King
    Texas Roadhouse
    Louisville KY
    ------------------------------

    Original Message
    Digital Acceleration Binge Day. January 28th 2021 | 11:00 AM - 2:00 PM EST


  • 3.  RE: FastPath Compliance Software

    SILVER CONTRIBUTOR
    Posted Dec 11, 2020 11:44 AM
    I appreciate your question because I am very interested to hear experiences and learn from them.  I appreciate Kayla King's detailed response.  I am an internal auditor for my non-profit and we use Fastpath Assure (cloud based).

    1. Do you recommend it or would you tell me to stay away and why?

    I recommend it.  They have great team and great expertise in security, particularly Alex Meyer who frequently posts in this forum. I think the software is designed and set up really well and is very intuitive to use.

    2. How long did your initial implementation take from installation to training?

    We have implemented access management and most reporting in year 1, but we have not started to use SOD in year 1 due to its depth.  I think the access management tool is really great.  I have appreciated it alot and that has been main focus so far.  Depending on how you will use their tool, consulting may be a extra cost.

    3. How has your long term support been?
    Fastpath's support model is terrific.  They are extremely accessible and responsive and they have a formal ticket system that I think is easy to use.  Also, they have been extremely responsive to feedback in their development, which I have really appreciated.  That has helped a lot. A couple of small development tweaks have had huge impact on our use of access management tool.

    4. What is the biggest value you have received from the product?
    Definitely it is the access management tool.  It has workflow, it automatically sets up users and user access. The workflow is extremely flexible and easy to maintain.  Access management includes SOD analysis, although I find it the SOD rules deep and complex in the access process that it is rendered useless as a decision making tool.

    5. What is the biggest issue you have had?
    As mentioned above, it is to adopt the SOD rules into a governance model in a practical way.

    ------------------------------
    Calvin Eddings
    The Church of Jesus Christ of Latter-Day Saints
    Salt Lake City UT
    ------------------------------

    Original Message
    Digital Acceleration Binge Day. January 28th 2021 | 11:00 AM - 2:00 PM EST


  • 4.  RE: FastPath Compliance Software

    SILVER CONTRIBUTOR
    Posted Dec 14, 2020 08:37 AM

    Hi Marc,

    Weve been using Fastpath on our Dynamics Finance and Ops system from Jan 2019 to date.

    1. Do you recommend it or would you tell me to stay away and why?

    Thoroughly recommend. if you see insightful posts about security on Dynamics 365 security on the web, it's invariably from the Fastpath guys. Likewise Alex Meyers parables about security settings and how they affect D365 licensing going forward.

    2. How long did your initial implementation take from installation to training?

    We already knew the security basics on the D365 platform. We had 1.5 hours of remote training and had it all deployed with useful reports within a couple of weeks. the main delay was leading up to the original order; we had to get terms added into the contract to cover GDPR obligations, which Fastpath reaily agreed to. One of the downsides of being one of their earlier customers in Europe (we're in UK).


    3. How has your long term support been?

    Very responsive, synonymous with instant "help". if we ever need a deep dive on a specific feature, then you just book another training/consultation session (it's free to subscribers),


    4. What is the biggest value you have received from the product?

    Being able to answer "who did what to what" questions where we've needed to trace back events to help reconcile D365 bugs and suspected security issues.


    5. What is the biggest issue you have had?

    The dashboard is overzealous on counting potential user conflict vector numbers, so management think we're doing a poor job! If the demo company is not removed from your system, it'll report the exact same security concerns on that as well as a live environment, so all the number of alleged conflicts double up. We've not been able to get Fastpath to give an option to ignore "Contoso Inc" in it's deliberations yet.

    Overall, delighted with it and the company. No hesitation at renewing it every year here.



    ------------------------------
    Ian Waring
    Head of Finance Systems & Projects
    Jisc
    Bristol
    ------------------------------

    Original Message
    Digital Acceleration Binge Day. January 28th 2021 | 11:00 AM - 2:00 PM EST


If you've found this thread useful, dive deeper into User Group community content by role