How to evaluate Sai360 (Formaly BWise) security: permissions, audit logs, and data controls?

Sai360 (formerly BWise) security can be evaluated by reviewing role-based permissions, audit logs, and data access controls.

• Permissions: Review Sai360 role based access to ensure each user only has access to required modules and actions. Check role mappings, approval rights, and periodic access reviews to follow the least privilege principle.
• Audit Logs: Verify that Sai360 records all user actions with clear details like user name, time, and changes made. Ensure only authorized admins can access logs and that logs are stored as per compliance needs.
• Data Controls: Evaluate how Sai360 protects data using encryption, secure access, and version control. Confirm data retention rules, privacy settings, and controls that prevent unauthorized changes or data leaks.