18.3.6 Set up Compliance Management in Enterprise Manager

Compliance Management provides the ability to evaluate the compliance of targets and systems as they relate to business best practices for configuration, security, and storage. This is accomplished by defining, customizing, and managing compliance frameworks, compliance standards, and compliance standard rules. In addition, Compliance Management provides advice of how to change configuration to bring your targets and systems into compliance. Compliance Management can help you maintain security and performance across all tiers with automated policy violation alerts for settings, for example, ensuring automated policy violation alerts for log levels, JVM versions, and patch levels. If you require legal compliance relating to security, you can set up WebLogic Security Technical Implementation Guidelines (STIG) rules as required.

For more details on compliance, see the Managing Compliance chapter of the Enterprise Manager Lifecycle Management Administrator's Guide. Also see the Managing Configuration Information of Oracle Enterprise Manager Lifecycle Management Administrator's Guide for information on a new feature, configuration drift that ensures consistency (uniformity) across a large number of targets.