Ensure BPM Approval Rule and Workflow Configuration Changes Are Audited

Како се проверава

Метод провере: Ручни преглед

Ова препорука се не може проверити аутоматски. Скенирање је наводи са овим упутствима када проследите --include-manual.

1. Access Setup and Maintenance → Manage Audit Policies → Audit Configuration. 2. Confirm that Audit for SOA/BPM Changes is Enabled (refer to Doc ID 2053746.1). Review Fusion Applications SOA Audit (Doc ID 2053746.1) 3. Verify that audit data is available through Audit Report / REST API. 4. Check for regular export or forwarding of BPM audit logs to the central logging system (OCI Logging / SIEM) for retention and correlation. 5. Review samples of recent approval rule modifications and confirm they match authorized change requests.

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

1. Enable auditing for SOA/BPM components in Fusion's audit configuration as per Doc ID 2053746.1. 2. Ensure all BPM rule changes are routed through change management or governance workflow. 3. Configure scheduled extraction of BPM audit logs for integration with centralized audit monitoring (OCI Logging, SIEM, or Analytics). 4. Implement periodic review (monthly/quarterly) of approval rule changes by business process owners and security administrators. 5. Set up alerts or dashboards for critical workflow-change events.