« Learn about Government Policies and Regulations Affecting the ... - Earthtimes | Main | AT&T releases new BlackBerry for small business market - Bizjournals.com »

April 21, 2008

Oracle(R) Database Vault Certified for the Oracle E-Business Suite Policies and Best Practices Help Secure Sensitive Application Data from Even Privileged Users

REDWOOD SHORES, Calif., Feb. 7 /PRNewswire-FirstCall/ -- Oracle today announced the certification of Oracle(R) Database Vault for use with the Oracle E-Business Suite. This enables customers to better protect sensitive application data from unauthorized access by any user, including privileged users, misusing their database privileges. Oracle Database Vault is the industry's most advanced database security product designed to enforce when, where, how, and by whom, data can be accessed.

(Logo: http://www.newscom.com/cgi-bin/prnh/20020718/ORCLLOGO)

The Oracle E-Business Suite applications including Oracle Human Capital Management, Oracle Financial Management, Oracle Supply Chain Management and Oracle Customer Relationship Management often contain personal identification information (PII), social security or credit card numbers that must be protected. Regulations such as Sarbanes-Oxley (SOX), Healthcare Insurance Portability and Accountability Act (HIPAA), Basel II, and Payment Card Industry (PCI) Data Security Standards (DSS) require companies to consider separation of duty and strong access controls on access to sensitive information. The certification of Oracle Database Vault for use with the Oracle E-Business Suite enables customers to better address their security and regulatory challenges.

Oracle Database Vault transparently defends against unauthorized access to application data as well as intentional or accidental harmful database changes by any users, even privileged users with database administrator (DBA) rights, taking into consideration multiple factors such as time of day, authentication, application, and more. It can be used to enforce separation of duties within the database, for example, blocking a DBA's access to sensitive application data while permitting the DBA to perform day-to-day operations such as database backup and recovery, tuning, and replication. With Oracle Database Vault, customers can consolidate application databases and enforce strong boundaries and policies around access to that data.

"Organizations rely on the Oracle E-Business Suite to drive key components of their business from finance to human resources to supply chain," said Cliff Godwin, senior vice president, Application Technology, Oracle. "The combination of Oracle Database Vault and the Oracle E-Business Suite helps enterprises secure their data against insider threats and comply with regulatory mandates."

"Oracle Database Vault monitors activity inside the database and enforces real-time preventive controls," said Vipin Samar, vice president of Database Security, Oracle. "Organizations can now protect sensitive E-Business suite application data at the source -- the database."

For independent software vendors (ISVs) and system integrators (SIs) with respective solutions and/or practices concerning Oracle Database Vault and Oracle E-Business Suite, this certification can reduce the complexity and cost of delivering secure applications and solutions to market. "Companies may now have more choice in effectively tackling application data security challenges by replacing weak detective controls with strong preventive controls to facilitate regulatory compliance," said Kelly Bissell, Principal, Deloitte & Touche LLP. Deloitte Consulting is a Certified Advantage Partner in the Oracle PartnerNetwork, the highest membership level in the Oracle PartnerNetwork.

To obtain Oracle Database Vault 10.2.0.3 policies for use with the Oracle E-Business Suite Release 11.5.10 as well as technical information about prerequisites, interoperability patches, and best practices, customers should refer to Metalink Note 428503.1: http://metalink.oracle.com/metalink/plsql/showdoc?db=NOT&id=428503.1

About Oracle Database Security

For more than over 30 years, Oracle has led the industry in securing sensitive data. Oracle Database 11g addresses today's data security challenges from data encryption, access control, and data classification, to audit and compliance reporting, as well as secure deployments and data masking. The comprehensive portfolio of security options for Oracle Database 11g, including Oracle Advanced Security, Oracle Database Vault, Oracle Label Security, Oracle Data Masking, and Oracle Audit Vault, help organizations transparently safeguard against data breaches and ensure regulatory compliance without requiring changes to existing applications. To learn more about how to protect data with Oracle Database 11g today, please visit: http://www.oracle.com/database/security.

About Oracle

Oracle is the world's largest enterprise software company. For more information about Oracle, visit our Web site at http://www.oracle.com/.

Trademarks

Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.

Photo: http://www.newscom.com/cgi-bin/prnh/20020718/ORCLLOGO
AP Archive: http://photoarchive.ap.org/
PRN Photo Desk, photodesk@prnewswire.com
Oracle

CONTACT: Eloy Ontiveros, 1-650-607-6458, eloy.ontiveros@oracle.com, or
Susie Penner, 1-650-506-1973, susanne.penner@oracle.com, both of Oracle

Web site: http://www.oracle.com/

TrackBack

TrackBack URL for this entry:
http://www.typepad.com/services/trackback/6a00e54ed2f120883300e55208ecd18834

Listed below are links to weblogs that reference Oracle(R) Database Vault Certified for the Oracle E-Business Suite Policies and Best Practices Help Secure Sensitive Application Data from Even Privileged Users :

Comments

Verify your Comment

Previewing your Comment

This is only a preview. Your comment has not yet been posted.

Working...
Your comment could not be posted. Error type:
Your comment has been posted. Post another comment

The letters and numbers you entered did not match the image. Please try again.

As a final step before posting your comment, enter the letters and numbers you see in the image below. This prevents automated programs from posting comments.

Having trouble reading this image? View an alternate.

Working...

Post a comment