Thursday Jul 14, 2011

Using Audit Vault with Oracle E-Business Suite

Oracle Audit Vault is a database option that automates the collection and consolidation of audit data to support regulatory compliance and reduce security risks.  Audit Vault provides compliance and entitle reports, alert notifications, and centralized audit policy management.  Audit Vault provides compliance reports to address regulatory requirements for database activity monitoring and auditing for:
  • Sarbanes-Oxley (SOX) Act
  • Health Insurance Portability and Accountability Act (HIPAA)
  • Payment Card Industry (PCI) Data Security Standards (DSS)

Conceptual diagram showing audit data tracked by Oracle Audit Vault

 From the Oracle Audit Vault FAQ:

Audit Vault extracts audit records produced by the database's native audit facility so no special certification is required by the application since it is transparent. Any packaged application such as Oracle E-Business Suite, PSFT, Siebel, and SAP work seamlessly with Audit Vault to collect the native audit records.

E-Business Suite suggests that auditing and monitoring of privileged users, user sessions, database links, and database changes is a key element in monitoring and securing your applications. Please see Metalink Note 189367.1. Audit Vault supports all versions of E-Business Suite that sit on top of Oracle database versions 9.2.x forward.

In addition, the Oracle database column, client_identifier, can be used to pass the end application user to the native audit record. E-Business Suite updates client_identifier automatically starting with version 12 of the application, PeopleTools starting with 8.50, and SAP kernal version starting with 7.10. The client_identifier value can be used in the Audit Vault reports to view the application user, OS user, and database connection user information for forensic analysis.

No special setups required for EBS

In other words, you can use Audit Vault's generic documentation for E-Business Suite databases.  No special EBS-specific documentation or setups are required to enable Audit Vault in EBS instances.

Related Articles


About

Search

Categories
Archives
« May 2015
SunMonTueWedThuFriSat
     
1
2
3
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
      
Today