Return-Path: X-Original-To: oracle-l@orafaq.com Delivered-To: oracle-l@orafaq.com Received: from puck1183.startdedicated.com (localhost [127.0.0.1]) by puck1183.startdedicated.com (Postfix) with ESMTP id 1B3A719611F8 for ; Fri, 29 Aug 2014 02:47:30 +0200 (CEST) Received: from turing.freelists.org (freelists-180.iquest.net [206.53.239.180]) by puck1183.startdedicated.com (Postfix) with ESMTP for ; Fri, 29 Aug 2014 02:47:30 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 015FF2E605; Thu, 28 Aug 2014 20:47:29 -0400 (EDT) X-Virus-Scanned: Debian amavisd-new at turing.freelists.org Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id Xu-jG5KiTOEB; Thu, 28 Aug 2014 20:47:28 -0400 (EDT) Received: from turing.freelists.org (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 45AC62E315; Thu, 28 Aug 2014 20:46:48 -0400 (EDT) Received: with ECARTIS (v1.0.0; list oracle-l); Thu, 28 Aug 2014 20:46:07 -0400 (EDT) Received: from localhost (localhost [127.0.0.1]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id 0747F2DD52 for ; Thu, 28 Aug 2014 20:46:07 -0400 (EDT) Received: from turing.freelists.org ([127.0.0.1]) by localhost (turing.freelists.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id d4n1hDKBQ1VE for ; Thu, 28 Aug 2014 20:46:06 -0400 (EDT) Received: from BLU004-OMC1S6.hotmail.com (blu004-omc1s6.hotmail.com [65.55.116.17]) by turing.freelists.org (Avenir Technologies Mail Multiplex) with ESMTP id D39332DD31 for ; Thu, 28 Aug 2014 20:45:39 -0400 (EDT) Received: from BLU179-W65 ([65.55.116.9]) by BLU004-OMC1S6.hotmail.com with Microsoft SMTPSVC(7.5.7601.22724); Thu, 28 Aug 2014 17:45:39 -0700 X-TMN: [bDzSzSrLnPMWhBKf0NeZLqp7s2yQ67m9] X-Originating-Email: [iggy_fernandez@hotmail.com] Message-ID: Content-Type: multipart/alternative; boundary="_5f153e73-bbd7-4e59-b6ac-c31d12d4fa6c_" From: Iggy Fernandez To: "david.barbour1@gmail.com" , Frits Hoogland CC: oracle-l mailing list Subject: RE: SOX Reporting Requirement Date: Thu, 28 Aug 2014 17:45:38 -0700 In-Reply-To: References: ,, MIME-Version: 1.0 X-OriginalArrivalTime: 29 Aug 2014 00:45:39.0660 (UTC) FILETIME=[8E0DB0C0:01CFC322] X-archive-position: 56091 X-ecartis-version: Ecartis v1.0.0 Sender: oracle-l-bounce@freelists.org Errors-to: oracle-l-bounce@freelists.org X-original-sender: iggy_fernandez@hotmail.com Precedence: normal Reply-To: iggy_fernandez@hotmail.com List-help: List-unsubscribe: List-software: Ecartis version 1.0.0 List-Id: oracle-l X-List-ID: oracle-l List-subscribe: List-owner: List-post: List-archive: X-list: oracle-l --_5f153e73-bbd7-4e59-b6ac-c31d12d4fa6c_ Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable LogMiner is the poor man's solution. Poor Man's Auditing with Oracle LogMiner by Caleb Smallhttp://www.nocoug.or= g/download/2008-05/LogMiner4.pdfhttp://www.nocoug.org/download/2008-05/lmte= st1a.sqlhttp://www.nocoug.org/download/2008-05/lmtest1b.sql Date: Thu=2C 28 Aug 2014 13:17:50 -0500 Subject: Re: SOX Reporting Requirement From: david.barbour1@gmail.com To: frits.hoogland@gmail.com CC: oracle-l@freelists.org Well we do have an imaginative buch in our compliance department.=20 With respect to the Total Recall=2C it looks like it would work=2C but it r= equires the Advanced Compression Option which we do not currently have lice= nsed. So either I revert to Plan A or inquire if their imagination include= s a budget. =0A= On Thu=2C Aug 28=2C 2014 at 12:40 PM=2C Frits Hoogland wrote: =0A= If you actually look at what is in SOX itself=2C you might be surprised. Th= ere is no implementation description. =0A= =0A= In my experience the audit requirements which the auditor requests are most= of the time based on the imagination of the auditor. =0A= =0A= Hint: you might want to ask where the requested implementation is specifica= lly detailed black on white. =0A= =0A= Frits Hoogland =0A= =0A= http://fritshoogland.wordpress.com =0A= frits.hoogland@gmail.com =0A= Office : +31 20 5939953 =0A= Mobile: +31 6 14180860 =0A= =0A= (Sent from my iPhone=2C typo's are expected) =0A= =0A= > Op 28 aug. 2014 om 17:05 heeft David Barbour h= et volgende geschreven: =0A= > =0A= > Morning=2C =0A= > =0A= > I was wondering how others might be handling the SOX reporting/auditing i= ssue we've been assigned. =0A= > =0A= > The audit folks want to know when DML occurs on a particular table and th= e original and new value(s). I've implemented FGA on the table and can cap= ture the change. Using the transaction ID=2C I can then go back to the fla= shback_transaction_query and get the original values. Of course=2C the onl= y guarantee of being able to pull the undo sql containing the original valu= es is that the query is performed before the undo retention expires. Pre-s= upposing I have a job that queries dba_fga_audit_trail and grabs the undo i= n time=2C what might happen next? I was thinking of storing the values in = a table created specifically for this purpose. Then I'd probably create a = view to generate the report. =0A= =0A= > =0A= > I'd appreciate any other ideas or refinements. This is a pretty busy dat= abase and I've got to be careful bumping undo retention too high. I'm undo= ubtedly missing something ............. =0A= = --_5f153e73-bbd7-4e59-b6ac-c31d12d4fa6c_ Content-Type: text/html; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable
LogMiner is the poor man's solution.

Poor Man's Auditing wi= th Oracle LogMiner by Caleb Small



<= div>
Date: Thu=2C 28 Aug 2014 13:17:50 -0500
Subj= ect: Re: SOX Reporting Requirement
From: david.barbour1@gmail.com
To:= frits.hoogland@gmail.com
CC: oracle-l@freelists.org

Well we do have an imaginative buch in our compliance department.=

With respect to the Total Recall=2C it looks like it would w= ork=2C but it requires the Advanced Compression Option which we do not curr= ently have licensed. =3B So either I revert to Plan A or inquire if the= ir imagination includes a budget.
=0A=


O= n Thu=2C Aug 28=2C 2014 at 12:40 PM=2C Frits Hoogland <= =3Bfrits.hoog= land@gmail.com>=3B wrote:
=0A=
If you actually look at what is in SOX itself=2C you m= ight be surprised. There is no implementation description.
=0A=
=0A= In my experience the audit requirements which the auditor requests are most= of the time based on the imagination of the auditor.
=0A=
=0A= Hint: you might want to ask where the requested implementation is specifica= lly detailed black on white.
=0A=
=0A= Frits Hoogland
=0A=
=0A= http://fri= tshoogland.wordpress.com
=0A= frits.hoogland@gmail.com=0A= Office : +31 20 5939953
=0A= Mobile: +31 6 14180860
=0A=
=0A= (Sent from my iPhone=2C typo's are expected)
=0A=
=0A= >=3B Op 28 aug. 2014 om 17:05 heeft David Barbour <=3Bdavid.barbour1@gmail.com>=3B het volgende = geschreven:
=0A=
>=3B
=0A= >=3B Morning=2C
=0A= >=3B
=0A= >=3B I was wondering how others might be handling the SOX reporting/audit= ing issue we've been assigned.
=0A= >=3B
=0A= >=3B The audit folks want to know when DML occurs on a particular table a= nd the original and new value(s). =3B I've implemented FGA on the table= and can capture the change. =3B Using the transaction ID=2C I can then= go back to the flashback_transaction_query and get the original values.&nb= sp=3B Of course=2C the only guarantee of being able to pull the undo sql co= ntaining the original values is that the query is performed before the undo= retention expires. =3B Pre-supposing I have a job that queries dba_fga= _audit_trail and grabs the undo in time=2C what might happen next? =3B = I was thinking of storing the values in a table created specifically for th= is purpose. =3B Then I'd probably create a view to generate the report.=
=0A= =0A= >=3B
=0A= >=3B I'd appreciate any other ideas or refinements. =3B This is a pre= tty busy database and I've got to be careful bumping undo retention too hig= h. =3B I'm undoubtedly missing something .............
=0A=

= --_5f153e73-bbd7-4e59-b6ac-c31d12d4fa6c_-- -- http://www.freelists.org/webpage/oracle-l