Access management | Miro Consulting

Oracle: Concurrent License versus Perpetual License

June 7, 2012May 23, 2012 Scott D. RosenbergAccess management, Compliance, Contract Lifecycle management, Oracle license, Oracle Licensing Compliance, Oracle Licensing Tip, software asset managementLeave a Comment

How Data Loss Prevention Technology Can Help You

February 8, 2011January 11, 2011 Scott D. RosenbergAccess management, Compliance, Database security, DSS (Data Security Standard), Identity management, IT Security, Oracle database, PCI (Payment Card Industry), Risk, Security Assessments, Security Risk1 Comment

Data Loss Prevention (DLP) is one of the key IT security measures a company must undertake. DLP is one of the 20 Critical IT Security Controls that the nonprofit security training agency SAN recommends. A recent news item provides a great real life of how Nationwide Insurance used DLP technology to prevent an employee’s unlawful activities. Nationwide recently installed new monitoring software to prevent unlawful transmission of data by its employees. The software snagged Qiang “Michael” Bi, a 36-year old […]

Viruses and Endpoint Protection

February 3, 2011January 28, 2011 Sam AlapatiAccess management, Database security, DSS (Data Security Standard), IT Security, Security AssessmentsLeave a Comment

The independent test lab AV_Test announced yesterday that it counted its 50millionth virus – according AV_Test, that’s 55,000 new viruses each day.

Using Oracle Database Firewall

February 1, 2011January 12, 2011 Scott D. RosenbergAccess management, Center of Internet Security (CIS), Compliance, Contract Lifecycle management, Cost Containment/Negotiation, Database security, DSS (Data Security Standard), Enterprise Agreement, GRC (Governance, HIPAA, Identity management, IT Asset Management, IT Security, Licensing Change Alert, Microsoft Licensing Compliance, Microsoft Licensing Tip, Microsoft: News You Can Use, Miro News, Oracle database, Oracle Licensing Compliance, Oracle Licensing Tip, Oracle: News You Can Use, PCI (Payment Card Industry), Risk, Security Assessments, Security Risk, software asset management, Software audit, SQL, Uncategorized, VirtualizationLeave a Comment

We’re all familiar with network firewalls, which prevent unauthorized access to your network from external sources. However, network firewalls don’t protect your databases from malicious attacks, which sometimes come disguised as privileged internal users. Web applications are a major source of data attacks, through stratagems such as SQL Injection, for example. Oracle’s Database Firewall (a product Oracle gained through its acquisition of Secerno, a British firm, in 2010) offers a solid defensive perimeter to monitor and enforce accepted behavior on […]

The New Ponemon Institute End Point Security Report

January 31, 2011January 11, 2011 Scott D. RosenbergAccess management, Compliance, Database security, Identity management, IT Security, Oracle database, Risk, Security Assessments, Security RiskLeave a Comment

Ponemon Institute has just (Dec 2010) released a new State of Endpoint report (http://www.lumension.com/Media_Files/Documents/Marketing—Sales/Others/Ponemon—State-of-Endpoint-Risk.aspx). The study, sponsored by Lumension, reveals that a full 64 percent of the 570 respondents surveyed report that their networks are less secure than they were a year ago, or they aren’t sure. And 58 percent report that their security costs are increasing, with malware incidents being the main driver of the escalating costs. A very interesting thing to note is the fact that most IT […]

Data Loss Prevention

January 25, 2011January 4, 2011 Sam AlapatiAccess management, Database security, DSS (Data Security Standard), IT Asset Management, IT Security, Oracle database, Risk, Security AssessmentsLeave a Comment

Data Loss Prevention (DLP) is something companies are devoting considerable attention to in recent years, and for good reason. DLP refers to efforts to keep confidential information from being leaked or stolen. Whether an employee sends secret documents and data to a rival or an employee accidentally exposes social security numbers on the wide open internet it’s all considered a failure of a company’s DLP efforts. DLP seeks to protect various types of data, including data relating to regulatory compliance, […]

What is Oracle Data Masking?

January 20, 2011January 4, 2011 Sam AlapatiAccess management, Center of Internet Security (CIS), Compliance, Contract Lifecycle management, Cost Containment/Negotiation, Database security, IT Security, Oracle database, Security Assessments, Security RiskLeave a Comment

Oracle Data Masking is an Option offered for use with Oracle’s databases. Data masking provides a way to de-identify data. When might a company need to de-identify its data? Well, companies service their customers through data stored in their production databases. However, the production database isn’t the only place that sensitive data is stored. Almost every company supports its production databases with various data stores called testing, development or staging databases. Privacy and regulatory mandates call for securing and protecting […]

Oracle Advanced Security

January 17, 2011January 4, 2011 Sam AlapatiAccess management, Compliance, Database security, DSS (Data Security Standard), HIPAA, Identity management, IT Security, Oracle database, PCI (Payment Card Industry), Risk, Security Assessments, Security RiskLeave a Comment

Oracle Advanced Security (OAS) is an Option that you can purchase for your Oracle databases. What exactly can OAS do for you? There are two key things that you can do with OAS – encrypt what is called data “at rest” and data “in flight”. The data at test that OAS lets you protect is the data stored on your storage disks, whether they are in database storage or in backup storage. Since your database and backup data is stored […]

Category: Access management