Access to OBS, its data and functionality is managed by the OBS internal security and control system.

The security officer can manage the access control per user and per user group. He can bundle program features and functionality together based on roles and responsibilities within the bank. Furthermore it is possible to restrict specific program functions such as the "Delete" function.

Embedded within the overall OBS access and workflow concept is the possibility to configure such workflow functions as the 4-eye principle.

To gain access to OBS a user must have a user-id and password. Users are shown only programs to which they have been authorised.

Based on the role profile allocated to a user, the default menu containing the required functionality is presented. Each user can create his or her own personalised menu by using simple drag-and-drop functionality.

All data changes, whether it be input, modification or deletion is written into an audit trail with user-id, type of change, the change itself and the time stamp.

These audit trails can be viewed online and printed in the form of reports or simply prepared and stored in an archival system.