Customer Connect

HCM - Coaches Corner

Product Office Hour : Benefits Audit

Presented by :
Lynda Tollefson : Benefits Product Management
December 16th 2021 Event ID: 331446
Host : Dave O’Meara: Strategy

© 2021 Oracle
Agenda
• Introduction to Benefits Audit
• Phase 1 Read audit
• Phase 2 Selected object audit trail
• Record Level Audit
• Demo
• Q&A
Audit Phase 1 – Read Audit

• 21D Phase 1
• Track Participation Actions in Self-Service Benefits
• Feature enables administrators and other benefits
professionals to answer participant queries, or
address participant challenges about enrollment
experience
Audit Phase 1 – Read Audit

• Captures page views and button or link clicks by

participants for certain actions in the enrollments flow
• Enables you to answer participant queries or address
participant challenges about enrollment selection
• Shows that the participant entered the enrollment flow but
didn’t make any selections
• Tracks if a participant has viewed their enrollments in Self-
Service without making any changes
Audit Phase 1 – Read Audit
• Click on My Client Groups->Transaction Configuration and
Audit-> Sensitive Data Access Audit
• Enter the name or person number of the participant for
whom you want to see the tracked data
• Enter a date range for which you want to see the tracked data
• If you leave the person, person number, and dates blank, the audit
returns all participants within the 90 day purge period
Audit Phase 1 – Read Audit
• Tracked data is purged every 90 days
• If you need to retain data for more than 90 days, you can
back up the data using Oracle Transactional Business
Intelligence (OTBI)
• You need to back up data every two to two and a half months
or at least a week before the purge is run
Audit Phase 1 – Read Audit Enablement
• You must turn this read audit on explicitly for Benefits
• Select the Manage Administrator Profile Values task in
the Setup and Maintenance work area
• ORA_HCM_SENSITIVE_DATA_VIEW_AUDIT_ENABLED
• In profile values region, ensure that the Profile Level is set
to Site and the Profile Value is set to Y
Audit Phase 1 – Read Audit Enablement
• View Sensitive Data Access Audit’ is secured using
PER_VIEW_SENSITIVE_DATA_ACCESS_AUDIT
• This privilege is inherited out of the box by the IT Auditor job
role (ORA_ASE_IT_AUDITOR_JOB)
• You can add it to additional job roles that should have access
to the audit details
 Audit Phase 1 – Read Audit Actions
Action Label in Audit Page

• List of actions Make Changes / Start Enrollment

Viewed Sensitive Data: Start Enrollment
Viewed Page: Self-Service Landing
recorded by the Your Benefits
Viewed Sensitive Data: Your Benefits
tracking feature Viewed Page: Self-Service Landing
Viewed Sensitive Data: <PGM Name> program selected
• How it displays Your Benefits, Program or Plan selection / <PNIP Name> plan selected

information on the
Viewed Page: Program Plan Selection on Your Benefits
Viewed Sensitive Data: Continue to Enrollment
Sensitive Data Access
Continue button on the Contacts page
Viewed Page: Before you Enroll

Audit page
Program Name, Overview
Submit button on the enrollment page
(Confirmation)
Cancel button on the enrollment page
Viewed Sensitive Data: <Program/PNIP Name>
Overview
Viewed Page: Election Overview
Viewed Sensitive Data: Submitted enrollment for
<Program/PNIP Name>
Viewed Page: Election Overview
Viewed Sensitive Data: Cancelled enrollment for
<Program/PNIP Name>
Viewed Page: Election Overview
Benefits Audit Phase 1 – Read Audit
Audit Phase 1 – Read Audit
Audit Phase 1 – Read Audit
 Audit Phase 1 – Read Audit
• BI subject area is available for customers to export data
• SENSITIVE DATA ACCESS AUDIT SUBJECT AREA
• This subject area enables you to track and report the details
about the sensitive data that is accessed from Oracle HCM
Cloud page
• Workforce Management

https://www.oracle.com/webfolder/technetwork/tutorials/tutorial/cloud/r13/wn/ghr/releases/21C/21C-global-hr-
wn.htm#F18787
Benefits Audit Phase 1 – Read Audit
 Audit Phase 1 – Read Audit
• Submit button on the
enrollment page
(Confirmation)
• Viewed Sensitive Data:
Submitted enrollment for
<Program/PNIP Name>
• Viewed Page: Election
Overview
Audit Phase 2- Selected object audit
• 22A
• Phase 2 Selected Objects(not all)
• Uses Fusion Apps Audit Trail
• Involves operations performed
• inserts
• updates
• deletes
• Who performed action
• When it was performed
• What was changed (values before and after)
• By default, auditing is disabled for all applications
Audit- Phase 2- Selected object audit
• To enable auditing
• FSM-> Manage Audit Policies-> Configure business
objects audit->Configure Business Object Attributes
• Auditing begins for the specified objects immediately
• To stop auditing an object, you can deselect the object on the
Configure Business Object Attributes page
• Select different attributes for audit at any time
• To manage audit, you must have the Manage Audit Policies
(FND_MANAGE_AUDIT_POLICIES_PRIV) function security
privilege
Audit Phase 2- Selected object audit
• Reporting Uses Common Audit Report functionality
• Purge historical audit data
• Ability to go back in time through several occurred events
• Tracks updates from UI(bsc or ssben), HDL, or spreadsheet
loaders
• Export to excel
Audit Phase 2- Selected object audit
• Tracking CRUD actions for administrators, participants, and
batch jobs
• Objects in phase 2
1. Participants events
2. Court order details
3. Billing Charges & payments
4. Person benefits balance
5. Person habits
Audit Phase 2- Selected object audit

FSM Manage Audit Policies->

Configure business objects
audit->Configure Business
Object Attributes
 Audit Phase 2- Selected object audit -Configure

• View Audited Objects

• View Audited Objects
Attributes
• Add new attributes to
existing audited objects
• Select additional objects
for Auditing etc.
 Audit Phase 2- Selected object audit
• Displays
Applications Tree
Table
• Displays structure
of auditable
modules
• Displays children
modules
• Displays all the
auditable view
objects
 Audit Phase 2- Selected object audit
• Tracked Objects
1. Participants events
2. Court order details
3. Billing charges & payments
4. Person benefits balance
5. Person habits
 Audit Phase 2- Selected object audit -Enable HDL
auditing
• Pre-requisites for HDL data
auditing
• Manage common Lookups
• Set FA_AUDIT_LEVEL to
Auditing
• SET ENABLE_AUDIT_DATA
Y line should be added in
dat file before METADATA
Audit Phase 2- Selected object audit
• User
• Event Type
 Audit Phase 2- Selected object audit
• Show
details of
before
and after
• Since this
is delete
no after
details
Audit Phase 2- Selected object audit

• Update by batch
loader
Audit Phase 2- Selected object audit
• Before
and
After
Update
event
type
Audit Phase 2- Selected object audit
Audit Phase 2- Selected object audit Purge

• Can only purge data older than 6 months old, to prevent

required data from being accidentally purged
• However, this can be overridden by creating a lookup type
[BEN_PURGE_DATA_RETENTION_OVERR ] with the lookup
value Y/Yes
• If this lookup is present then any date range can be purged
even if it is less than six months old
Audit Phase 2- Selected object audit
Audit Phase 2- Selected object audit
• Purge Stage Data Batch job is enhanced to uptake audit and
purge the audit data
• Audit data can be purged either by dates or by business
object.
• For example, if user wants to purge all Benefit Balance audit data,
select Benefit Balance as the Source Key and leave the From and To
Date blank
• Alternatively, if the need is to purge all data for all business
objects, provide a date range and leave the Source Key blank
Audit Phase 2- Selected object audit
Audit Phase 2- Selected object audit
• To access the data recorded by the audit process, you view
audit reports in the Audit Reports work area
• To open the Audit Reports work area,
select Navigator > Tools > Audit Reports
• To view audit reports, you must have the View Audit Reports
(FND_VIEW_AUDIT_REPORTS_PRIV) function security
privilege.
• The predefined Internal Auditor job role has this privilege
 Audit Phase 2- Selected object audit

• Navigator > Tools > Audit Reports

Audit Phase 2- Selected object audit
• To access the data recorded by the audit process, you view
audit reports in the Audit Reports work area
• To open the Audit Reports work area,
select Navigator > Tools > Audit Reports
• To view audit reports, you must have the View Audit Reports
(FND_VIEW_AUDIT_REPORTS_PRIV) function security
privilege.
• The predefined Internal Auditor job role has this privilege
 • Benefits Audit- Record Level Audit
• UI audit data
• View -> About this Record
Demo
Q&A