Re: Data Privacy, Auditing, Encryption Question

Kirti,

So they want something entirely outside Oracle that can track every single action performed within Oracle, no matter what the access method? Wow, I'd like to see that one as well.

    I'm assuming this is for SoX? If so, perhaps it might be better to ask how others are complying with their SoX auditor requirements.

    Perhaps you could suggest that the security officer keep the SYS and SYSTEM account passwords, and when a DBA needs to perform a task, the security officer temporarily changes the password and then sits behind the DBA to verify he/she is only performing the authorized tasks.

Dennis Williams

--
http://www.freelists.org/webpage/oracle-l