The Oracle E-Business Suite applications including Oracle Human Capital Management, Oracle Financial Management, Oracle Supply Chain Management and Oracle Customer Relationship Management often contain personal identification information (PII), social security or credit card numbers that must be protected. Regulations such as Sarbanes-Oxley (SOX), Healthcare Insurance Portability and Accountability Act (HIPAA), Basel II, and Payment Card Industry (PCI) Data Security Standards (DSS) require companies to consider separation of duty and strong access controls on access to sensitive information. The certification of Oracle Database Vault for use with the Oracle E-Business Suite enables customers to better address their security and regulatory challenges.

Oracle Database Vault transparently defends against unauthorized access to application data as well as intentional or accidental harmful database changes by any users, even privileged users with database administrator (DBA) rights, taking into consideration multiple factors such as time of day, authentication, application, and more. It can be used to enforce separation of duties within the database, for example, blocking a DBA's access to sensitive application data while permitting the DBA to perform day-to-day operations. With Oracle Database Vault, customers can consolidate application databases and enforce strong boundaries and policies around access to that data.

"Organizations rely on the Oracle E-Business Suite to drive key components of their business from finance to human resources to supply chain," said Cliff Godwin, senior vice president, Application Technology, Oracle. "The combination of Oracle Database Vault and the Oracle E-Business Suite helps enterprises secure their data against insider threats and comply with regulatory mandates."

"Oracle Database Vault monitors activity inside the database and enforces real-time preventive controls," said Vipin Samar, vice president of Database Security, Oracle. "Organizations can now protect sensitive E-Business suite application data at the source -- the database."

For independent software vendors (ISVs) and system integrators (SIs) with respective solutions and/or practices concerning Oracle Database Vault and Oracle E-Business Suite, this certification can reduce the complexity and cost of delivering secure applications and solutions to market. "Companies may now have more choice in effectively tackling application data security challenges by replacing weak detective controls with strong preventive controls to facilitate regulatory compliance," said Kelly Bissell, Principal, Deloitte & Touche LLP. Deloitte Consulting is a Certified Advantage Partner in the Oracle PartnerNetwork, the highest membership level in the Oracle PartnerNetwork.

To obtain Oracle Database Vault 10.2.0.3 policies for use with the Oracle E-Business Suite Release 11.5.10 as well as technical information about prerequisites, interoperability patches, and best practices, customers should refer to Metalink Note 428503.1:
http://metalink.oracle.com/metalink/plsql/showdoc?db=NOT&id=428503.1

About Oracle Database Security
For more than over 30 years, Oracle has led the industry in securing sensitive data. Oracle Database 11g addresses today's data security challenges from data encryption, access control, and data classification, to audit and compliance reporting, as well as secure deployments and data masking. The comprehensive portfolio of security options for Oracle Database 11g, including Oracle Advanced Security, Oracle Database Vault, Oracle Label Security, Oracle Data Masking, and Oracle Audit Vault, help organizations transparently safeguard against data breaches and ensure regulatory compliance without requiring changes to existing applications. To learn more about how to protect data with Oracle Database 11g today, please visit: http://www.oracle.com/database/security.

About Oracle
Oracle (NASDAQ: ORCL) is the world's largest enterprise software company. For more information about Oracle, please visit our Web site at http://www.oracle.com .

Trademarks
Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.