Ensure BPM Approval Rule and Workflow Configuration Changes Are Audited

So wird geprüft

Prüfmethode: Manuelle Prüfung

Diese Empfehlung kann nicht automatisch geprüft werden. Ein Scan führt sie mit diesen Anweisungen auf, wenn Sie --include-manual übergeben.

1. Access Setup and Maintenance → Manage Audit Policies → Audit Configuration. 2. Confirm that Audit for SOA/BPM Changes is Enabled (refer to Doc ID 2053746.1). Review Fusion Applications SOA Audit (Doc ID 2053746.1) 3. Verify that audit data is available through Audit Report / REST API. 4. Check for regular export or forwarding of BPM audit logs to the central logging system (OCI Logging / SIEM) for retention and correlation. 5. Review samples of recent approval rule modifications and confirm they match authorized change requests.

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

1. Enable auditing for SOA/BPM components in Fusion's audit configuration as per Doc ID 2053746.1. 2. Ensure all BPM rule changes are routed through change management or governance workflow. 3. Configure scheduled extraction of BPM audit logs for integration with centralized audit monitoring (OCI Logging, SIEM, or Analytics). 4. Implement periodic review (monthly/quarterly) of approval rule changes by business process owners and security administrators. 5. Set up alerts or dashboards for critical workflow-change events.