Re: Auditing Oracle business processes?

On 8/10/05, Denham Eva <EVAD@xxxxxxxxxx> wrote: 
> 
> Hello Group
> 
> I have had an unusual request (at least it is for me).
> I have been asked if there is some way to audit the Oracle Processes
> within the Database.
> Some thing along the line of, how can I prove that when the user enters
> data into the database that all the relevant triggers kick off and all
> the relevant procedures/packages etc are accessed, also the application
> is operating correctly at db level.

  If you know what the correct triggers and procedures and code are exactly 
then you could trace a session in a test system (just sql trace would do you 
don't need timing info for this) and the various executions of database side 
code (triggers et al) would be recorded - not easily readable mind but hey. 
 client side code wouldn't get recorded and the obvious question to ask 
would be how you know what *should* get executed. 
 
Now my logic says that checking that garbage IN and checking Garbage OUT
> and the correctness of the garbage would be an indication of "correct
> procedural execution"; does not seem to excite Management quite as I had
> hoped.

 Well from an audit point of view it is perfectly valid to take a sample of 
inputs and see what outputs they produced - i.e treat the system as a black 
box and verify statistically that its doing the right things. 
 
Also Management seems to have the impression that databases have an
> internal system of being able to do this??
> Is this so? Beyond the obvious Auditing functions of who did what when
> etc (Tried explaining that, got the glazed look).
> 
> Does anyone have (Know of) some other method?
> 
> TIA
> Best Regards
> Denham
> --
> http://www.freelists.org/webpage/oracle-l
> 



-- 
Niall Litchfield
Oracle DBA
http://www.niall.litchfield.dial.pipex.com

Other related posts: