Review Audit and Compliance Records

Overview

Use this guide to find audit events, export records, and review access or configuration changes.

Goal

Use audit records to understand what changed, who changed it, and when.

Before You Begin

• Sign in to Liceo.
• Confirm you have permission to view audit records.
• Know the date range, user, app, contract, or event type you need to review.

Step 1 - Open the audit ledger

1. 1
   Open Intelligence in the left sidebar.
2. 2
   Select Audit Ledger.
3. 3
   Wait for audit events to load.

Step 2 - Filter audit events

1. 1
   Select the date range.
2. 2
   Filter by user if you are investigating a specific actor.
3. 3
   Filter by entity if you are reviewing an app, contract, vendor, equipment record, or integration.
4. 4
   Filter by action type if available.
5. 5
   Apply the filters.

Step 3 - Review an event

1. 1
   Open the audit event.
2. 2
   Review the actor.
3. 3
   Review the timestamp.
4. 4
   Review the affected record.
5. 5
   Compare the previous value and new value if shown.
6. 6
   Note any follow-up needed.

Step 4 - Export audit records

1. 1
   Apply the required filters.
2. 2
   Confirm the date range.
3. 3
   Select Export if available.
4. 4
   Save the file in the approved internal location.
5. 5
   Share only with authorized reviewers.

Step 5 - Review access roles

1. 1
   Open the user or team management area.
2. 2
   Review each user's role.
3. 3
   Confirm admins still need admin access.
4. 4
   Downgrade or remove unnecessary access according to your internal process.
5. 5
   Record the access review if required.

Troubleshooting

Audit event is missing

Check the date range and filters. The event may also be outside the retention window.

Export is too broad

Filter by date, actor, entity, or action type before exporting.

User has too much access

Update the user role or remove access according to your internal approval process.