Auditing of Changes made in HCM Cloud

Summary

We are being asked to produce detailed auditing of changes made to key business objects in HCM Cloud

Content

We are currently going through the unenviable process of an internal IT Audit of our HCM Cloud instance. One of the (Many) thing they have come up with is that we need to be able to say WHO made and WHEN changes have been made to a variety of areas of the application. They have listed;

General changes:

• Critical configuration changes,

• User creation, modification, role assignment, role removal,

• Policy creation, modification, 

• Log enablement, disablement,

• Critical report running, extraction,

Examples of business critical activities (we decide this group):