Oracle has released an audit management tool company officials say will help address both regulatory compliance issues and the so-called insider threat facing enterprises.
Organizations can use Oracle Audit Vault to centrally manage their database auditing configuration and deploy uniform audit policies, said Vipin Samar, vice president of database security at Oracle. With this release, businesses can consolidate audit silos across their organization and house all audit data in a single warehouse, he added.
“Its really about knowing whats happening inside those databases, whos doing what,” Samar said in an interview with eWEEK.
Oracle officials also stated Audit Vault can help cut the cost of compliance by making it easier for auditors and security personnel to manage and report on audit data, officials added. In addition, customers can use Oracle Audit Vaults open-data warehouse schema and generate reports from their audit repository using Oracle BI Publisher or third-party reporting tools.
Customers who need to comply with the audit requirements of regulations such as the Sarbanes-Oxley Act also may benefit from the features of Audit Vault.
“I think database auditing and monitoring helps to demonstrate to auditors and regulators that controls are in place…and provide evidence of the effectiveness of those controls,” said Trent Henry, an analyst with the Midvale, Utah-based Burton Group, in an interview.
“Architecturally, this is a detective control, which we think is a necessary element of a systematic, comprehensive protection portfolio,” he continued. “Preventive controls, like encryption, access controls, etc. need to be monitored for correct policies and proper operation. Thats what a monitoring tool like this does, so its highly complementary (to Oracles other database products).”
Currently, Oracle Audit Vault only works with Oracle Database 10g Release 2, Oracle Database 10g and Oracle9i Database Release 2. It is not compatible with databases from other vendors, though Samar said there are plans to add support for non-Oracle products within the next fiscal year.
Oracle Audit Vault Server is priced at $50,000 per processor.
Check out eWEEK.coms Security Center for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEKs Security Watch blog.
