SECURITYdirect

Prevent, Protect and Respond
SECURITYdirect is designed to test Oracle security across the Oracle product set including databases, middleware and applications. The service identifies weak points and target areas, either at threat from human intervention or gaps in security protocol or convention.

By testing and examining every part of the environment, any inherent weaknesses either in Oracle technical estate or through bad practices can be exposed. Organisations then can plan towards mitigating any risk exposure by changing procedures, locking down incumbent technology or purchasing best of breed, security based products.

SECURITYdirect service provides a modular approach to protecting any Oracle environment. Initially the service identifies potential weaknesses within the Oracle applications, database environment and compares incumbent procedures against best industry practices. Once identified, and only if appropriate, DSP will offer remediation strategies to resolve those issues.

Many organisations accept a certain level of risk, but many are unsure what the risk exposure is until it is quantified. The SECURITYdirect service use proven methodologies, processes and historical data to identify weaknesses in any defences both from internal and external threats. Once completed, the host organisation can demonstrate at what level of security their systems environment is at and if any threats have been identified. The security function within the organisation will be presented with a description of what the security exercise achieved, the process undertaken and how any security threat or risk could manifest itself to the detriment of the wider organisation.

New Levels of Security reached by using Oracle Data and Audit Vault

Oracle Oracle Audit Vault  & Oracle Database Vault addresses some of the most common security problems and internal threats by:
  • Restricting both the DBA and assigned users from accessing application data
  • Preventing the Application DBA from manipulating the database and accessing other applications
  • Controlling application access to who, when and where scenarios
In the UK even US compliance regulations such as the US Sarbanes-Oxley (SOX), US Healthcare Insurance Portability and Accountability Act (HIPAA) can have an impact on UK based organisations. The recent EU Privacy Directive has enforced much tighter internal controls on the access to personnel or sensitive data.

The new legislation makes it imperative, that organisations prevent unforseen disclosure or modification of sensitive information, which in turn could lead to identity theft and financial irregularities.

Both the technology DBA and Applications DBA have historically had the ability to view change or amend details that could be used to defraud companies or individuals.

Whilst no system is completely safe from security threats and completely safe, Database and Audit Vault ensures that only those that should have ultimate access to sensitive data do.

A serious incident can affect the organisation at any time and this includes the today, not just tomorrow! Someone will be held responsible for any disasters and the blame might land on your desk!! Contact DSP to prevent any IT disaster.
 

 DSP Supports Oracle & Microsoft using GroundWork