What does controls "60016/60015 Updates/Addition & Deletion to Security Profiles" actually track?
Summary:
These are two of the seeded controls under Common Set Up: "60016: Updates to Security Profiles" and "60015: Addition and Deletion to Security Profiles" which we expect are trying to track: 1. Any new security profile created (insert) 2. Any existing security profile option value deleted (delete) and 3. Updating the existing profile option value (update).
If we take a look at the incident page, it highlights the newly created security profiles added to the data roles and to which criteria the security profile has been assigned and the security profile ID. But, it does not reflect the actual change that was made or the Security Profile name.