Audit trail at Database level Available or Not???
Summary:
Hi Team,
For FCCS application we are getting question from Auditor about whether Audit trail is available at Database level? We have given them SOC 1 type 2 report and following is the comment of them on that report.
"On review of the SOC 1 Type 2 report, we have noted that no testing is performed by service auditor for audit log at database level. Since Service Auditor have not commented upon Audit Trial over Database, we also cant comment whether Auditor Trial is enabled/disabled at database level."
Can anyone please assist us on this that how can we answer on this to Auditors? From this year in India it is mandatory for Auditors to report on Audit trail so we are getting lots of question on Audit trail and retention of the same in Untampered form.