Oracle(r) Database Vault Certified for the Oracle E-Business Suite

Policies and Best Practices Help Secure Sensitive Application Data from Even Privileged Users
REDWOOD SHORES, Calif. - Oracle today announced the certification of Oracle(r) Database Vault for use with the Oracle E-Business Suite. This enables customers to better protect sensitive application data from unauthorized access by any user, including privileged users, misusing their database privileges. Oracle Database Vault is the industry’s most advanced database security product designed to enforce when, where, how, and by whom, data can be accessed.

The Oracle E-Business Suite applications including Oracle Human Capital Management, Oracle Financial Management, Oracle Supply Chain Management and Oracle Customer Relationship Management often contain personal identification information (PII), social security or credit card numbers that must be protected. Regulations such as Sarbanes-Oxley (SOX), Healthcare Insurance Portability and Accountability Act (HIPAA), Basel II, and Payment Card Industry (PCI) Data Security Standards (DSS) require companies to consider separation of duty and strong access controls on access to sensitive information. The certification of Oracle Database Vault for use with the Oracle E-Business Suite enables customers to better address their security and regulatory challenges.

Oracle Database Vault transparently defends against unauthorized access to application data as well as intentional or accidental harmful database changes by any users, even privileged users with database administrator (DBA) rights, taking into consideration multiple factors such as time of day, authentication, application, and more. It can be used to enforce separation of duties within the database, for example, blocking a DBA’s access to sensitive application data while permitting the DBA to perform day-to-day operations such as database backup and recovery, tuning, and replication. With Oracle Database Vault, customers can consolidate application databases and enforce strong boundaries and policies around access to that data.

“Organizations rely on the Oracle E-Business Suite to drive key components of their business from finance to human resources to supply chain,” said Cliff Godwin, senior vice president, Application Technology, Oracle. “The combination of Oracle Database Vault and the Oracle E-Business Suite helps enterprises secure their data against insider threats and comply with regulatory mandates.”

“Oracle Database Vault monitors activity inside the database and enforces real-time preventive controls,” said Vipin Samar, vice president of Database Security, Oracle. “Organizations can now protect sensitive E-Business suite application data at the source -- the database.”

For independent software vendors (ISVs) and system integrators (SIs) with respective solutions and/or practices concerning Oracle Database Vault and Oracle E-Business Suite, this certification can reduce the complexity and cost of delivering secure applications and solutions to market. “Companies may now have more choice in effectively tackling application data security challenges by replacing weak detective controls with strong preventive controls to facilitate regulatory compliance,” said Kelly Bissell, Principal, Deloitte & Touche LLP. Deloitte Consulting is a Certified Advantage Partner in the Oracle PartnerNetwork, the highest membership level in the Oracle PartnerNetwork.

To obtain Oracle Database Vault 10.2.0.3 policies for use with the Oracle E-Business Suite Release 11.5.10 as well as technical information about prerequisites, interoperability patches, and best practices, customers should refer to Metalink Note 428503.1:
http://metalink.oracle.com/metalink/plsql/showdoc?db=NOT&id=428503.1
Trademarks
Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.