In 12C, three audit strategies are pre-defined: ORA_SECURECONFIG,ORA_DATABASE_PARAMETER,ORA_ACCOUNT_MGMT
This three predefined audit policies can be created by scripting $oracle_home/rdbms/admin/secconf.sql scripts, and the Ora_secureconfig policy is turned on, and the other two are not enabled by default.
ORA_ACCOUNT_MGMT: Audit user accounts and permissions
Ora_database_parameter: Audit of database parameter modification behavior
Ora_secureconfig: Includes audit policy in 11g
Sql> Select Policy_name,audit_option from Audit_unified_policies where Policy_name in (' Ora_account_mgmt ', ' ORA_ Database_parameter ', ' ora_secureconfig '); Policy_name audit_option------------------------------------------------------------ora_secureconfig Logminingora_secureconfig TRANSLATE any sqlora_secureconfig exempt redaction POLI Cyora_secureconfig PURGE dba_recyclebinora_secureconfig administer KEY Managementora_securecon FIG DROP any SQL translation profileora_secureconfig ALTER any SQL translation PROFILEORA_SECU Reconfig create any SQL translation profileora_secureconfig create SQL translation Profileora_ Secureconfig Create EXTERNAL jobora_secureconfig Create any Jobora_secureconfig GRANT any OBJECT privilegeora_secureconfig exempt ACCESS policyora_secureconfig CREATE Any libraryora_secureconfig GRANT any privilegeora_secureconfig DROP any Procedureora_securec Onfig ALTER any procedureora_secureconfig CREATE any procedureora_secureconfig A Lter databaseora_secureconfig GRANT any roleora_secureconfig DROP public synonymora_secureconf IG CREATE public synonymora_secureconfig DROP any tableora_secureconfig ALTER an Y tableora_secureconfig CREATE any tableora_secureconfig DROP userora_secureconfig CREATE userora_secureconfig AUDIT systemora_secureconfig ALTER systemora_account_mgmt ALTER userora_account_mgmt Create userora_account_mgmt Create Roleora_account_mgmt Drop userora_account_mgmt Drop ROLEORA_ACCOUNT_MGMT SET roleora_account_mgmt ALTER roleora_aCcount_mgmt grantora_account_mgmt revokeora_database_parameter ALTER databaseora_datab Ase_parameter ALTER systemora_database_parameter Create spfileora_secureconfig Create Databa SE linkora_secureconfig DROP DATABASE linkora_secureconfig ALTER userora_secureconfig CREATE roleora_secureconfig DROP roleora_secureconfig SET roleora_secureconfig CREATE profileora_secureconfig DROP profileora_secureconfig ALTER profileora_secureconfig ALTER roleora_secureconfig CREATE directoryora_secureconfig DROP directoryora_s Ecureconfig ALTER DATABASE linkora_secureconfig CREATE pluggable Databaseora_secureconfig ALTER pluggable databaseora_secureconfig DROP pluggable Databaseora_secureconfig EXE CUTE
12C pre-defined audit policies