Sox Report Specifics; History Of Privilege Changes Report (Hpc); Cobit Objectives And Setup Requirements; Report Body Columns - Fortinet FortiDB User Manual

History of Privilege Changes Report (HPC)

SOX Report Specifics

This section lists the COBIT objectives and descriptions, the FortiDB MA module-setup requirements, and
individual-column detail for each report in this release.
History of Privilege Changes Report (HPC)

COBIT Objectives and Setup Requirements

Objective
Number(s)
AI2.4, DS3.5,
DS5.3, DS5.4

Report Body Columns

The following columns are displayed in the report body:
Column
User ID
Grantee
Action
Target
Sys Privilege
Obj Privilege
Time Stamp
44
HPC Report Sample
Objective Description
Changes to escalate or reduce database-user
access privileges are tracked for review on a
quarterly basis by the IT manager and the
application business manager.
Description
The ID of the database user that initiated the privilege change.
The name of the user for whom privileges were changed.
The type of action successfully enacted by a non-application user account.
Actions include UPDATE, INSERT, and GRANT.
The object on which the privileges were changed.
The type of system privilege GRANTed to, or REVOKEd from, the grantee.
The type of object privilege GRANTed to, or REVOKEd from, the grantee.
The exact time the flagged activity was conducted.
SOX Report Specifics
FortiDB MA Module
Setup Requirement
PM: using the Audit data
retrieval method
FortiDB Version 3.2 Utilities User Guide
15-32000-81369-20081219