Unified Operations & Dynamics AX Forum

Expand all | Collapse all

SOX 404 control in AX 2012 R3

  • 1.  SOX 404 control in AX 2012 R3

    TOP CONTRIBUTOR
    Posted 7 days ago
    Hi All

    Please  can some advise the path how to generate an application change log in AX 2012,

    Thanks and kind regards
    AXUG Summit - Post


  • 2.  RE: SOX 404 control in AX 2012 R3

    GOLD CONTRIBUTOR
    Posted 6 days ago
    Nazim,

    Are you looking to track changes made in the database or in the application code or both?

    Also because you listed SOX 404 in our title, are their other audit requirements you are trying to meet?

    ------------------------------
    Alex Meyer
    Director of Dynamics AX/365 for Finance & Operations Development
    Fastpath
    Des Moines, IA
    ------------------------------

    AXUG Summit - Post


  • 3.  RE: SOX 404 control in AX 2012 R3

    TOP CONTRIBUTOR
    Posted 6 days ago
    Thanks Alex

    Current requirement is changes made in both database and application, please can you advise the path in AX 2012 R3 or what which area in AOT to pull this report

    Also if you can specify what are the other requirement falls under SOX 404

    Thanks and kind regards
    AXUG Summit - Post


  • 4.  RE: SOX 404 control in AX 2012 R3

    GOLD CONTRIBUTOR
    Posted 6 days ago
    Nazim,

    Database changes will have to be done either by the database log or by an external tracking software. I will advise that the database log within Dynamics AX was never meant as an audit tool, it was built as a debugging tool. You will see a performance decrease if you enable this feature for any number of tables. There are also very few native reports and data management capabilities built into the tool itself.

    But also keep in mind that you will not be able to track every change that is occuring in the database, you want to take a 'risk based approach' to what you are tracking and making sure that there is an audit requirement for tracking that change. By doing this you help improve system performance and minimize the amount of data you need to track and report on.

    X++ code changes should be handled by your source control setup, here are some Microsoft docs on the subject:
    https://docs.microsoft.com/en-us/dynamicsax-2012/developer/version-control-system
    https://docs.microsoft.com/en-us/dynamicsax-2012/developer/version-control-operations-in-microsoft-dynamics-ax
    Once you have source control set up you can report on the changes made to code much easier.

    As far as other audit requirements go, you may also be needing Segregation of Duty reports I've actually written a white paper about the gaps in Microsoft's SOD platform that auditors will ask about. It can be found here: Fastpath vs. Dynamics AX/D365FO Segregation of Duty Analysis Comparison

    If you have further questions feel free to reach out, I would be happy to answer them.

    ------------------------------
    Alex Meyer
    Director of Dynamics AX/365 for Finance & Operations Development
    Fastpath
    Des Moines, IA
    ------------------------------

    AXUG Summit - Post


  • 5.  RE: SOX 404 control in AX 2012 R3

    SILVER CONTRIBUTOR
    Posted 5 days ago
    Hi Nazim,

    I used FastPath at my last company.  It offers a lot, especially if you put in the effort to configure it to get what you're really looking for.  Feel free to reach out if you want the customer perspective.

    ------------------------------
    Lori Hodsoll
    Supernus Pharmaceuticals
    Rockville, MD
    ------------------------------

    AXUG Summit - Post


If you've found this thread useful, dive deeper into User Group community content by role