Best Practices for Securing Oracle E-Business Suite Release 12

For EBS 12 security hardening the first place to start is Metalink Note 403537.1 - Best Practices for Securing Oracle E-Business Suite Release 12
https://metalink2.oracle.com/metalink/plsql/docs/EBS_SEC_1_0_0.pdf

Patch 4926128 contains a script to scan for default passwords which should be changed by FNDCPASS

http://download.oracle.com/docs/cd/B53825_02/current/acrobat/121sacg.pdf

Also need to set site level profile option Sign-On: Audit Level to Form to track logins, responsibility access, and form access.

http://download.oracle.com/docs/cd/B53825_02/current/acrobat/121sasg.pdf