Sourced finance and insurance context
Policies, accounts, and controlled transactions: Oracle Security
Hartford's 2025-2029 consolidated plan reports finance, insurance, and real estate as 30 percent of city jobs in its business-activity table and identifies finance and insurance among the city's highest-paying industries. Translate the operating setting into roles, privileges, data access, duty separation, service accounts, and sensitive transactions. Ask how users complete assigned work under the proposed controls. Insurance and financial systems can join accounts, policies, premiums, claims, payments, identity, risk rules, approvals, reconciliations, reporting, and audit evidence.
Evidence to request: Use an access-design exercise with job duties, application roles, data scope, conflicts, service accounts, and approval owners. Name the product, transaction or claim, system of record, money movement, control owner, reporting date, reconciliation, exception path, and production support target.
Sourced education and health care context
Care, learning, and protected records: Oracle Security
The Hartford plan reports education and health care services as 28 percent of city jobs and names health care and social assistance among the city's largest industries. Define joiner, mover, leaver, request, approval, provisioning, review, and removal flows across Oracle applications and identity services. Require evidence from connectors, workflows, logs, and exception handling. Health and education systems may connect clinical or student records, scheduling, billing, grants, workforce data, access controls, retention rules, and formal review.
Evidence to request: Review an identity or provisioning defect with source identity, target account, logs, correction, retest, and user impact. Set the care, research, teaching, or administrative process, source record, data classification, access reviewer, integration, reporting obligation, and acceptance owner.
Sourced data and professional services context
Analysis, telecommunications, and client delivery: Oracle Security
Hartford's plan describes the city as a major data-processing and telecommunications center and reports professional, scientific, and management services as 12 percent of city jobs. Set audit and release ownership. Candidates should explain conflict analysis, role redesign, migration, population testing, evidence retention, emergency access, and follow-up review. Data and professional-services work can cross client environments, source systems, identity boundaries, analytical definitions, delivery evidence, and several operating teams.
Evidence to request: Ask for an audit finding or application release the consultant handled, including analysis, configuration, population testing, evidence, and closure. Clarify whether the role owns an internal platform or client delivery, then document the source data, service boundary, users, access model, output, service measure, and handoff.