Ensure BPM Approval Rule and Workflow Configuration Changes Are Audited

Kako se proverava

Metod provere: Ručni pregled

Ova preporuka se ne može proveriti automatski. Skeniranje je navodi sa ovim uputstvima kada prosledite --include-manual.

1. Access Setup and Maintenance → Manage Audit Policies → Audit Configuration. 2. Confirm that Audit for SOA/BPM Changes is Enabled (refer to Doc ID 2053746.1). Review Fusion Applications SOA Audit (Doc ID 2053746.1) 3. Verify that audit data is available through Audit Report / REST API. 4. Check for regular export or forwarding of BPM audit logs to the central logging system (OCI Logging / SIEM) for retention and correlation. 5. Review samples of recent approval rule modifications and confirm they match authorized change requests.

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

1. Enable auditing for SOA/BPM components in Fusion's audit configuration as per Doc ID 2053746.1. 2. Ensure all BPM rule changes are routed through change management or governance workflow. 3. Configure scheduled extraction of BPM audit logs for integration with centralized audit monitoring (OCI Logging, SIEM, or Analytics). 4. Implement periodic review (monthly/quarterly) of approval rule changes by business process owners and security administrators. 5. Set up alerts or dashboards for critical workflow-change events.