How Oracle will prevent the employees to load malicious files into the system ?

Summary:

As part of an audit observation, our auditor has raised a concern that
An attacker, with access to the upload functionality in the application, may be able to upload malicious files like trojans, executables, server side scripts, macros, potentially leading to security attacks like denial of service, data theft and server compromise.

Can you please let us know how Oracle will prevent the employees to load malicious files into the system

Content (please ensure you mask any confidential information):

Version (include the version you are using, if applicable):

Code Snippet (add any code snippets that support your topic, if applicable):