Introduction

The present page serves as an overview for the topic. All available documents for the topic can be found here.

About the Topic

Auditing is the feature to produce an audit log or audit trail.

An audit trail (also called audit log) is a security-relevant chronological record, set of records, and/or destination and source of records that provide documentary evidence of the sequence of activities that have affected at any time a specific operation, procedure, or event. (http://en.wikipedia.org/wiki/Audit_trail)

The basic ideas for the auditing framework of Intershop 7/Intershop Commerce Management include:

• Consistency between the data in the system and in the audit trail
  This implies that if a business operation fails, the audit trail must not contain an entry for a success; also, if auditing fails, the business operation must be rolled back.
• Configurability of the actual target for the audit messages
  In any case, it must be possible to route messages to an external system (PA-DSS certification requirement).
• High customizability for most features
  Since auditing brings an extra overhead to the business functionality, this allows to reach the maximum performance for each project by omitting as much as possible.

Overview