Solved

Access Audit Controls for SOX compliance

  • 21 July 2021
  • 3 replies
  • 32 views

Userlevel 2
Badge +4

I am looking for ways to monitor any changes made to any Oracle objects (tables,Views, Packages, etc...). Does IFS have tools or module for logging changes to objects? Any suggestions?

 

Thanks

icon

Best answer by NickPorter 22 July 2021, 16:36

I don’t know about that, I would suggest asking your IFS rep the same question.  I’m sure they can provide some Oracle-oriented partners like Re-Quest but I don’t know about their level of DDL audit experience with IFS customers.

That said I also don’t know if there is a strong requirement for them to have much IFS knowledge as part of the auditing setup, as long as you can provide them with some guidance about the IFS schemas and perhaps some of the more critical tables etc that you would need to monitor (e.g. financial areas for SOX)

Nick

View original

3 replies

Userlevel 6
Badge +14

I don’t believe IFS  directly offers any tool to do this, since really you’re talking about needing to track or stop changes at the Oracle level and not anything within IFS.  For example if a DBA just changed a table in SQL Developer IFS has zero insight into that.

From the Oracle side of things you would probably need to implement DDL triggers to identify changes.  Here is a 3rd party link with some good information about starting down this road…

http://www.dba-oracle.com/art_builder_proper_oracle_design_for_auditing.htm

Here’s another link from the same site, which starts at a higher level in the same area:

http://www.dba-oracle.com/t_tracking_schema_changes.htm

Hope this helps,

Nick

Userlevel 2
Badge +4

Thank you,

Are there any IFS partners that have Oracle DDL auditing experts?

 

Thank you.

Userlevel 6
Badge +14

I don’t know about that, I would suggest asking your IFS rep the same question.  I’m sure they can provide some Oracle-oriented partners like Re-Quest but I don’t know about their level of DDL audit experience with IFS customers.

That said I also don’t know if there is a strong requirement for them to have much IFS knowledge as part of the auditing setup, as long as you can provide them with some guidance about the IFS schemas and perhaps some of the more critical tables etc that you would need to monitor (e.g. financial areas for SOX)

Nick

Reply