# Ensure tenancy has at least one notification topic with active subscriptions

- Source: https://support.icompaas.com/support/solutions/articles/a_1790698528586453-ensure-tenancy-has-at-least-one-notification-topic-with-active-subscriptions
- Section: [Solutions](https://support.icompaas.com/support/solutions) › [Oracle Cloud](https://support.icompaas.com/support/solutions/c_1790697859097233) › [Checks](https://support.icompaas.com/support/solutions/folders/f_1790697878907807)
- Last updated: 2026-09-29
- Publisher: iCompaas, Inc. (https://www.icompaas.com)

**Description**

Ensure the tenancy has at least one Notifications topic with at least one active (confirmed) subscription, such as an email address, PagerDuty, Slack, or a function. Event rules and alarms send their alerts to topics, so a topic with active subscribers is needed for alerts to reach anyone.

**Rationale**

Event rules and monitoring alarms can only notify people through a topic. If there is no topic, or its subscriptions were never confirmed, security alerts are created but never delivered. Keeping at least one topic with active subscriptions makes sure important alerts reach the right team.

**Impact**

-   Security alerts and event notifications are delivered
    
-   Supports all event rule checks in this document
    
-   Subscribers receive alert messages
    

**Default Value**

By default, no notification topics or subscriptions exist.

**Pre-Requisites**

-   Permission to manage ons-topics and ons-subscriptions
    
-   An email address or other endpoint for the security team
    

**Test Plan**

1.  Sign in to the OCI Console at [https://cloud.oracle.com](https://cloud.oracle.com/).
    
2.  Open the navigation menu, select Developer Services, and under Application Integration select Notifications.
    
3.  Verify that at least one topic exists (check the root and other compartments).
    
4.  Open the topic and verify that at least one subscription has the state Active.
    
5.  If no topic has an active subscription, follow the implementation steps.
    

**Implementation Steps**

1.  Sign in to the OCI Console at [https://cloud.oracle.com](https://cloud.oracle.com/).
    
2.  Open the navigation menu, select Developer Services, and under Application Integration select Notifications.
    
3.  Select Create topic, enter a name (for example, security-alerts), and select Create.
    
4.  Open the topic, select Create subscription, choose a protocol such as Email, enter the address, and select Create.
    
5.  Confirm the subscription from the email that is sent, and check that its state changes to Active.
    

**Backout Plan**

1.  Sign in to the OCI Console at [https://cloud.oracle.com](https://cloud.oracle.com/).
    
2.  Open the topic, delete the subscription, and delete the topic if it is no longer needed.
    

**Reference**

-   [https://docs.oracle.com/en-us/iaas/Content/Notification/Concepts/notificationoverview.htm](https://docs.oracle.com/en-us/iaas/Content/Notification/Concepts/notificationoverview.htm)

## Related compliance guidance

- [SOC 2 compliance: a practical implementation guide for cloud-native SaaS teams](https://support.icompaas.com/compliance/soc-2-trust-services-criteria): Configuration checks like this one are the technical half of a SOC 2 / ISO 27001 programme — the guide shows where they fit, what else an auditor expects, and how to evidence them.
- [ISO/IEC 27001:2022 compliance: a practical implementation guide](https://support.icompaas.com/compliance/iso-27001-2022): ISO 27001 Annex A.8 (technological controls) is where cloud hardening evidence lands; the guide shows how to run the ISMS around it.