Rule explorer
Browse every hardening rule in the catalogue. Filter by platform, severity, profile level and whether the check can be automated.
44 rules foundof 11,219Page 1 of 2
| ID | Title | Platform | Severity | Level | Check |
|---|---|---|---|---|---|
| TMA-ORACLE-SAAS-1.1 | Ensure Password Policy Enforces Length and Rotationoracle-saas · Level 1 | oracle-saas | High | 1 | Manual review |
| TMA-ORACLE-SAAS-1.2 | Ensure MFA is Enforced for All SaaS Usersoracle-saas · Level 1 | oracle-saas | High | 1 | Manual review |
| TMA-ORACLE-SAAS-1.3 | Ensure Phishing-Resistant MFA Is Enforced for SaaS Administrators and Privileged Accountsoracle-saas · Level 1 | oracle-saas | High | 1 | Manual review |
| TMA-ORACLE-SAAS-1.4 | Ensure Fusion Applications Administrators Have Access Only to Fusion Applications Resourcesoracle-saas · Level 2 | oracle-saas | High | 2 | Manual review |
| TMA-ORACLE-SAAS-1.6 | Ensure Privileged and Administrative Roles Are Restricted to Known IP Addressesoracle-saas · Level 1 | oracle-saas | High | 1 | Manual review |
| TMA-ORACLE-SAAS-1.7 | Ensure Privileged Access is Certified Periodicallyoracle-saas · Level 1 | oracle-saas | High | 1 | Manual review |
| TMA-ORACLE-SAAS-1.8 | Ensure Oracle Break Glass for Fusion Cloud Service Is Enabledoracle-saas · Level 2 | oracle-saas | High | 2 | Manual review |
| TMA-ORACLE-SAAS-1.9 | Ensure Basic Authentication Is Blocked for SOAP and REST API Integrationsoracle-saas · Level 2 | oracle-saas | High | 2 | Manual review |
| TMA-ORACLE-SAAS-1.11 | Ensure Integration Account Secrets Are Rotated on a Regular Scheduleoracle-saas · Level 1 | oracle-saas | High | 1 | Manual review |
| TMA-ORACLE-SAAS-1.12 | Ensure EPM Automate Credentials Are Protected via Secure Storageoracle-saas · Level 1 | oracle-saas | High | 1 | Manual review |
| TMA-ORACLE-SAAS-3.4 | Ensure BPM Approval Rule and Workflow Configuration Changes Are Auditedoracle-saas · Level 2 | oracle-saas | High | 2 | Manual review |
| TMA-ORACLE-SAAS-5.1.1 | Ensure Transactions Created/Updated by Fusion Administrators Are Monitoredoracle-saas · Level 1 | oracle-saas | High | 1 | Manual review |
| TMA-ORACLE-SAAS-5.1.3 | Ensure Assignments of Substantial Access to EPM Administrators Are Monitoredoracle-saas · Level 1 | oracle-saas | High | 1 | Manual review |
| TMA-ORACLE-SAAS-1.5 | Ensure OCI Console Access Is Restricted to Administrative Accountsoracle-saas · Level 1 | oracle-saas | Medium | 1 | Manual review |
| TMA-ORACLE-SAAS-1.10 | Ensure All API Based Integrations Use OAuth Authenticationoracle-saas · Level 1 | oracle-saas | Medium | 1 | Manual review |
| TMA-ORACLE-SAAS-1.13 | Ensure Dormant Accounts and Orphaned Identities Are Automatically Detected and Disabledoracle-saas · Level 2 | oracle-saas | Medium | 2 | Manual review |
| TMA-ORACLE-SAAS-2.1 | Ensure Network Perimeters are Configured in IAM or the Identity Provideroracle-saas · Level 2 | oracle-saas | Medium | 2 | Manual review |
| TMA-ORACLE-SAAS-2.2 | Ensure OCI Console Access Is Restricted to Trusted Networksoracle-saas · Level 1 | oracle-saas | Medium | 1 | Manual review |
| TMA-ORACLE-SAAS-2.3 | Ensure Access to Fusion is restricted via Access Control List (ACL)oracle-saas · Level 1 | oracle-saas | Medium | 1 | Manual review |
| TMA-ORACLE-SAAS-2.4 | Ensure Location-Based Access Control (LBAC) is enabledoracle-saas · Level 1 | oracle-saas | Medium | 1 | Manual review |
| TMA-ORACLE-SAAS-2.5 | Ensure Geolocation Filtering with WAF for SaaS is enforcedoracle-saas · Level 2 | oracle-saas | Medium | 2 | Manual review |
| TMA-ORACLE-SAAS-2.6 | Ensure IP-Based Filtering with WAF for SaaS is Enforcedoracle-saas · Level 2 | oracle-saas | Medium | 2 | Manual review |
| TMA-ORACLE-SAAS-2.7 | Ensure Qualified Target Filtering with WAF for SaaS is Enforcedoracle-saas · Level 2 | oracle-saas | Medium | 2 | Manual review |
| TMA-ORACLE-SAAS-3.1 | Ensure Fusion Applications Login, Logout and Session Events are Captured, Exported, and Forwarded to Central Loggingoracle-saas · Level 2 | oracle-saas | Medium | 2 | Manual review |
| TMA-ORACLE-SAAS-3.2 | Ensure EPM Audit Data is Exported and Centrally Storedoracle-saas · Level 2 | oracle-saas | Medium | 2 | Manual review |