Security Design Hardening Pack 2406223

You might also like

Download as pdf or txt
Download as pdf or txt
You are on page 1of 3

`

ORACLE DAT A SHEET

Oracle Security Design and


Hardening Support

Oracle Security Design and Hardening Support is a comprehensive database


analysis and configuration offering, designed to address security vulnerability
by applying Oracle recommended practices and implementing Oracle
Database security product sets, processes, and procedures.

KEY FEATURES Reduce the Risk of Data Breach by Securing your Information
• Tailored suite of services for planning from the “Inside-out” with Oracle Security Design and
and deployment of database security Hardening Support
recommended practices and products
customized to your industry and Oracle Security Design and Hardening Support provides services in a flexible
specific business needs framework that can be customized and tailored to your unique database security needs.
• Local and remote delivery options
using the innovative Oracle Advanced The package has multiple components beginning with a security-specific Plan and
Support Cloud Design Phase and ending with Build and Deploy Phase of the hardening database
• Technical Account Manager: solution. The Oracle Advanced Customer Support Technical Account Manager
Throughout entire engagement, the oversees all phases of the offering to ensure seamless movement from kick-off to
Oracle Technical Account Manager is completion.
your single Oracle point of contact to
manage all activities
Plan and Design Phase: The Plan and Design phase focuses on building a
supportable Database Security Deployment Plan specific to your configuration and
KEY BENEFITS business requirements. The deployment plan, built leveraging Oracle’s recommended
• Reduces security risks due to security practices, is designed to close off common vulnerabilities and identify database
database configuration issues
security products or procedures that need to be implemented.
• Tightens database security practices
and standards
Typical Activities Include:
• Identifies and fixes critical security
patches and upgrades that place  Process checks to ensure that default passwords, system IDs, and ports have been
systems at risk changed
• Helps ensure proper logging and  Identify unnecessary packages that may introduce security risk
auditing techniques are in place
• Single point of contact  Recommend database security patches

• Technical Account Manager helps  Identify unnecessary or vulnerable services to be disabled


ensure processes are optimized,
 Ensure password enforcement and public privileges are scrutinized
including communication, support, and
change management for your  Examine and provide modification plans for security logging and auditing techniques
environment
 Identify missing or needed Oracle Database security products (i.e.: Database Vault,
Data Masking, Label Security, and Key Vault)

 Creation of a detailed Database Security Deployment Plan


ORACLE DAT A SHEET

Benefits:
OPTIONAL SERVICES
 Clearly map how to harden your Oracle Database
• Operating System Hardening
 Identify procedural or process changes to reduce risk
• Time and materials engagement
 Provide roadmap for needed database security updates and additional security
• Installation of Oracle Database security
products to enable: product installation

• Data encryption and redaction


• Database firewalling and auditing Build and Deploy Phase: This phase focuses on deployment of Oracle Database,
• Data masking Oracle Exadata, or Oracle SuperCluster hardening techniques in accordance with the
Security Deployment Plan, and implementation of any optional Oracle Database
• Privileged user controls
security products. Oracle Advanced Support Engineers update database security
• Label based access control configurations based on the customized deployment plan and build sheets, and apply
• Management of encryption keys and any critical database security patches.
wallets

Typical Activities Include:

 Change default ports and listeners


 Remove unnecessary packages

 Install database security patches


 Disable useless or vulnerable services
 Enforce password security

 Update event audit settings


 Limit public privileges
 Operate System Hardening (optional via Time and Materials)

 Install Oracle Database Security Products (optional)


o Advanced Security
o Audit Vault and Database Firewall
o Database Vault

o Data Masking
o Label Security
o Key Vault

Benefits:
 Deploy proven database configurations that mitigate risk
 Decrease time to deploy with expert Oracle Advanced Customer Services installation
 Tighten database security practices and standards
 Identify and fix critical security patches and upgrades that place data at risk
ORACLE DAT A SHEET

In-Depth Database Defense for Maximum Security


Reducing risk at the database level with database hardening is key to securing your
business critical data. Oracle Advanced Customer Services can strengthen these
preventive measures by adding optional operating system hardening and/or database
security product installation services into your Security Deployment Plan. Adding these
optional services, and installing them to Oracle standards, will help ensure your
investment, prevent data breaches, and satisfy the regulatory requirements.

CONTACT US
For more information about Oracle Security Design and Hardening Support, visit oracle.com/acs, email
us at acs_ww@oracle.com, or call +1.800.ORACLE1 to speak to an Oracle representative.

CONNECT W ITH US

blogs.oracle.com/oracle Copyright © 2018, Oracle and/or its affiliates. All rights reserved. This document is provided for information purposes only, and the
contents hereof are subject to change without notice. This document is not warranted to be error-free, nor subject to any other
warranties or conditions, whether expressed orally or implied in law, including implied warranties and conditions of merchantability or
facebook.com/oracle fitness for a particular purpose. We specifically disclaim any liability with respect to this document, and no contractual obligations are
formed either directly or indirectly by this document. This document may not be reproduced or transmitted in any form or by any means,
twitter.com/oracle electronic or mechanical, for any purpose, without our prior written permission.

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.
oracle.com
Intel and Intel Xeon are trademarks or registered trademarks of Intel Corporation. All SPARC trademarks are used under license and
are trademarks or registered trademarks of SPARC International, Inc. AMD, Opteron, the AMD logo, and the AMD Opteron logo are
trademarks or registered trademarks of Advanced Micro Devices. UNIX is a registered trademark of The Open Group. 0818

You might also like