Compliance is crucial for many organizations, and the people responsible
for guaranteeing compliance are not necessarily in the IT department. Consequently,
the implementation of security and audit schemes has had to be simplified
and coordinated to address compliance needs.
Oracle has two options specifically designed to address compliance challenges??”
Oracle Data Vault and Oracle Audit Vault; these are described in the following
sections. The related Flashback Data Archive capability, also mentioned below, is
described in greater detail in Chapter 3.
Oracle Database Vault Option
The Oracle Database Vault Option was introduced in 2006 and restricts DBAs and
other highly privileged users from accessing application data to which they should
not have access. It can also be set up so that applications??™ DBAs are not allowed to
manipulate the database or access other applications. A security administrator can
use the Oracle Database Vault Option to describe the security scheme that the organization
wants to implement, and this option automatically implements the schemes
using the features described earlier in this chapter.
Pages:
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343