Ensure BPM Approval Rule and Workflow Configuration Changes Are Audited

高等級 2人工審核oracle-saas

說明

Enable and monitor auditing for changes to BPM (Business Process Management) approval rules and SOA workflow configurations within Oracle Fusion Applications. These rules determine the routing and approval hierarchy for critical business transactions (e.g., expense approvals, journal entries, purchase orders, HR ... Approval rules define key authorization paths that enforce financial and operational controls. Unauthorized or untracked changes can enable fraudulent approvals, insider threats, or policy violations. Reported as a manual review item: these Fusion/EPM/OCI IAM settings are reviewed in the Oracle SaaS and OCI consoles or reports.

檢查方式

稽核方法: 人工審核

此項建議無法自動檢查。當您傳入 --include-manual 時，掃描結果會列出此項目並附帶這些說明。

1. Access Setup and Maintenance → Manage Audit Policies → Audit Configuration. 2. Confirm that Audit for SOA/BPM Changes is Enabled (refer to Doc ID 2053746.1). Review Fusion Applications SOA Audit (Doc ID 2053746.1) 3. Verify that audit data is available through Audit Report / REST API. 4. Check for regular export or forwarding of BPM audit logs to the central logging system (OCI Logging / SIEM) for retention and correlation. 5. Review samples of recent approval rule modifications and confirm they match authorized change requests.

修補方式

修補方法: 操作指南或基礎設施修補檔

1. Enable auditing for SOA/BPM components in Fusion's audit configuration as per Doc ID 2053746.1. 2. Ensure all BPM rule changes are routed through change management or governance workflow. 3. Configure scheduled extraction of BPM audit logs for integration with centralized audit monitoring (OCI Logging, SIEM, or Analytics). 4. Implement periodic review (monthly/quarterly) of approval rule changes by business process owners and security administrators. 5. Set up alerts or dashboards for critical workflow-change events.

屬性

作業系統: 不限
標籤: oracle-saaslogging
參考資料: CIS Oracle SaaS Cloud Applications Benchmark v1.0.0 - 3.4 Ensure BPM Approval Rule and Workflow Configuration Changes Are Audited