TMA-ORACLE-SAAS-3.2
Ensure EPM Audit Data is Exported and Centrally Stored
Mô tả
EPM Cloud Applications generate audit data that records user sign-ins, administrative actions, and configuration changes. This audit data should be exported regularly from the EPM environment to ensure it is retained outside of the application. Audit data retained only inside EPM is limited by default retention policies and is vulnerable to loss or deletion. Exporting ensures durability and independence, while forwarding into OCI Logging Analytics or a SIEM ... Reported as a manual review item: these Fusion/EPM/OCI IAM settings are reviewed in the Oracle SaaS and OCI consoles or reports.
Cách kiểm tra
Phương pháp kiểm tra: Xem xét thủ công
Khuyến nghị này không thể kiểm tra tự động. Lần quét sẽ liệt kê mục này kèm hướng dẫn khi bạn truyền cờ --include-manual.
1. Confirm that EPM audit data exports are scheduled and active. 2. Verify that audit data files contain expected details, such as user ID, login time, IP address, and executed functions. 3. Check that exported data is securely stored in an external location, like Object Storage.
Cách khắc phục
Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng
Configure automated export of EPM audit data (for example, with EPM Automate Access Log downloads). Store exported files securely outside the transactional environment. Test and validate that exports and any forwarding pipelines complete successfully, without data loss.
Thuộc tính
- Hệ điều hành
- Bất kỳ
- Thẻ
- oracle-saaslogging
- Tham chiếu
- CIS Oracle SaaS Cloud Applications Benchmark v1.0.0 - 3.2 Ensure EPM Audit Data is Exported and Centrally Stored