Oracle Cloud Audit (Fusion HCM)

Content

I hope this makes sense...

Has anyone gone through an outside audit of their Fusion system? Where they ask about your Access Management, Application Development, etc? If so, how do you provide this information if you are on the Cloud and aren't directly involved in some aspect (i.e. moving code to production)