RE: A Question on auditing the Oracle 11i "apps" schema

  • From: "John Kanagaraj" <john.kanagaraj@xxxxxxx>
  • To: <racdba@xxxxxxxxxxxxx>, <oracle-l@xxxxxxxxxxxxx>
  • Date: Tue, 27 Sep 2005 19:19:24 -0700

Hameed,
 
We do audit DDL using a system level DDL trigger that covers all schemas
(including APPS) and have not seen any performance issues. In Oracle
Apps, there are a number of objects on which DDL is performed regularly
as part of the program itself (truncates, interim processes, etc.) which
you can choose to ignore, and store the rest (ora_sysevent,
ora_dict_obj_* and sys_context are your best friends here). When APPS is
not covered, you haev lost most of the critical stuff... 
 
John Kanagaraj <><
DB Soft Inc
Phone: 408-970-7002 (W)
 
Co-Author: Oracle Database 10g Insider Solutions
http://www.samspublishing.com/title/0672327910
 
** The opinions and facts contained in this message are entirely mine
and do not reflect those of my employer or customers **

________________________________

From: racdba-bounce@xxxxxxxxxxxxx [mailto:racdba-bounce@xxxxxxxxxxxxx]
On Behalf Of Hameed, Amir
Sent: Tuesday, September 27, 2005 6:53 AM
To: oracle-l@xxxxxxxxxxxxx; racdba@xxxxxxxxxxxxx
Subject: A Question on auditing the Oracle 11i "apps" schema



This question is for those folks who are running the Oracle applications
e-business suite. We are in the process of getting compliance with SOX
regulations. One of the controls that the auditors are asking for is to
keep track of changes (DDL) in the instance. So far, we are auditing all
the accounts with the exception of "apps" because of the performance
reasons. I would be interested to know how are others keeping track of
the apps account activities ?

Any help would be appreciated. 

Thanks 
Amir 

Other related posts: