RE: Oracle/Server Audit

Here's a framework I constructed some years ago that didn't happen. Also, there's a lot of similar in Appendix A of the terrific book Oracle Applications Performance Tuning Handbook by Tremayne. It's got stuff like rollbacks and init params etc. They call it a "project documentation" but it hits a lot of what you're saying.
(They might have posted a smaller version on MetaLink).

Hardware specs, including PO number and xerox of PO System software - including version numbers Application software - including version numbers Operational plan - including backup plans

Hardware specifications:
  Identification
    Purchase Order Copy
    Model number
    Serial number
  Configuration
    Power requirements
    Power backup capability
    Peripherals list
Systems software information:
  Operating system
    Internal contact
    Support contract details
    Vendor contact information
    Source
    Version information
    License information
    Software location on disk
    Logs [on disk] and retention policy
    Install directions
    Modifications installed
  Compilers
[same list]

  Security software
   [same list]
  Backup software
   [same list]
  Connectivity software
   [same list]

Applications software
  SQL*Net
[same software list]

  Oracle Server
[same software list]

  Oracle Apps
[same software list]

  Misc. compilers
[same software list]

  [other homegrown]
[same software list]

Operational (hardware and system software)

Contacts
Upgrade notification checklist
Backup scheme
Security scheme
Daily monitoring
Trending
Account setup

Operational (application software)

[same list as above]

-----Original Message-----
Sent: Monday, September 24, 2001 3:28 PM To: Multiple recipients of list ORACLE-L

First off, let me state that this post is NOT referring to Oracle Database Auditing.

That may be one of the criteria in the audit I'm referring to, but is only peripherally
relevant to my question.

What I need is a document that can be used to audit a server that one or more
Oracle databases are on, audit the setup and configuration of the database itself, as well as an audit of operational items.

Here are examples:

System:

OS version
Physical/Logical volume layout.
Is it local, SAN, NAS or something else?

Backup hardware, software and capabilities.

There can be OS specific sections:

Unix:
Oracle database owner.
location of oratab

NT:

Domain:
Failsafe in use?
Details if so.

Oracle:

Have default passwords been changed?
Who has DBA access?
Who requires DBA access?
Is Archiving on?
If so, is it setup properly?

Operational:

OS monitoring, backup and deletion of archive logs?

OS level monitoring in place. e.g. disk space, alert.log monitoring, sniped session monitor, etc.

Backup/recovery tested?
Documented?

And lastly, a section with recommendations for all of the above.

All comments, suggestions and recommendations are welcome.

URL's to document(s) with a fair amount of this already in place are especially welcome, and will be rewarded with a virtual beer, or beverage of your choice. :)

Or if I see you at IOUG, a real one.

Thanks

Jared

-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: 
  INET: Jared.Still_at_radisys.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).
-- 
Please see the official ORACLE-L FAQ: http://www.orafaq.com
-- 
Author: Shreter, Hilary
  INET: ShreterH_at_orau.gov

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).