Audit Process, Reports, and Compliance Workflows
Reports and audit processes
Report Builder combines a query (data source, columns, filters), a report layout, and optional scheduling. Audit Processes chain audit tasks-each producing a report or correlation-plus distribution via email, SCP, or SFTP. Compliance templates map controls to queries and reports for frameworks such as PCI DSS, SOX, GDPR, and HIPAA.
Compliance workflow
Pick the framework, select the data source group, generate the assessment, review failures, schedule recurring evidence, and retain the output. Reports on a collector see only local data; use an aggregator for cross-collector scope and longer retention.
Worked example
PCI DSS requires a daily review of access to cardholder data. Build a query for successful SELECTs by non-application users on card tables, save it as a report, create an audit process with a daily schedule, and distribute a PDF to the compliance mailbox. Run it once manually, confirm row counts, then enable the schedule and confirm delivery.
Traps
Scheduling a report against data that purge will remove; forgetting distribution credentials; assuming a compliance template covers every control without customization; running an enterprise report on a collector instead of the aggregator.