Oracle/Server Audit

From: <Jared.Still_at_radisys.com>
Date: Mon, 24 Sep 2001 11:08:50 -0700
Message-ID: <F001.00396AF4.20010924112731@fatcity.com>

First off, let me state that this post is NOT referring to Oracle Database Auditing.

That may be one of the criteria in the audit I'm referring to, but is only peripherally
relevant to my question.

What I need is a document that can be used to audit a server that one or more
Oracle databases are on, audit the setup and configuration of the database itself, as well as an audit of operational items.

Here are examples:

System:

OS version
Physical/Logical volume layout.
Is it local, SAN, NAS or something else?

Backup hardware, software and capabilities.

There can be OS specific sections:

Unix:
Oracle database owner.
location of oratab

NT:

Domain:
Failsafe in use?
Details if so.

Oracle:

Have default passwords been changed?
Who has DBA access?
Who requires DBA access?
Is Archiving on?
If so, is it setup properly?

Operational:

OS monitoring, backup and deletion of archive logs?

OS level monitoring in place. e.g. disk space, alert.log monitoring, sniped session monitor, etc.

Backup/recovery tested?
Documented?

And lastly, a section with recommendations for all of the above.

All comments, suggestions and recommendations are welcome.

URL's to document(s) with a fair amount of this already in place are especially welcome, and will be rewarded with a virtual beer, or beverage of your choice. :)

Or if I see you at IOUG, a real one.

Thanks

Jared

--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author:
INET: Jared.Still_at_radisys.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------

To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Mon Sep 24 2001 - 13:08:50 CDT