GRC PC 10.1
I’m looking to create a Business Rule to monitor changes to the Formula ID field in table UKM_FORMULAS. According to our developers, the Formula_ID value itself will not change (encrypted field) even if the actual formula configuration has changed.
Would a Business Rule monitoring changes to the Formula_ID value trigger a deficiency if the Formula_ID value changes? Or would this monitoring not work since the encrypted value would remain unchanged?
Lastly, if the monitoring I proposed would trigger a deficiency, would table logging need to be enabled for this table? It currently is not.