Plan to Remove Users Administration and Groups Administration from Audit Reports
With respect to your Plan to Remove Users Administration and Groups Administration from Audit Reports we have the following questions, as they are currently used for Ardagh's internal SOX compliance.
a) In the future, once it is turned off from the Audit report, how can we continue to obtain information relating to User Administration and Group Administration to meet your SOX compliance requirements? Can you please confirm that we can continue to obtain similar information through other means such as Identity Console, EPM Automate, EPM Cloud REST APIs?
b) What else might be captured as part of User and Group Administration other than the items listed here: https://docs.oracle.com/en/cloud/saas/freeform/freef/audit_overview.html . We have done some testing and we found that this also includes Audit configuration, which tracks whether any of the trackable items have been turned on or off by an administrator. Can you confirm if it is going to be possible to include in the report when Configuration relating to what is tracked and not tracked when an Administrator switches on or off the various Configuration/configurable items: