Oracle Press Release

Oracle Further Automates Database Auditing and Monitoring with Latest Release of Oracle® Audit Vault

Oracle Introduces New Reporting and Alerting Capabilities to Help Reduce Costs of Addressing Regulatory Mandates and Insider Threats

Redwood Shores, CA – November 11, 2009

News Facts

To help organizations secure all their enterprise databases and address regulatory requirements, Oracle today announced the availability of Oracle® Audit Vault Release 10.2.3.2.
This latest release of Oracle Audit Vault introduces key new reporting and alerting capabilities that streamline and help reduce the cost of the database audit process.

Complete Solution for Database Auditing and Activity Monitoring Delivers New Reporting, Alerting, Compliance Features

Oracle Audit Vault Release 10.2.3.2 automates the database audit process with new features including:
Report scheduling, notification, attestation and archiving capabilities that can help organizations lower the cost of complying with internal and external data privacy and protection mandates;
Entitlement reports with up-to-date snapshots of Oracle Database users, privileges and profiles, which allow auditors to track changes to database access;
Compliance reports to specifically address the Sarbanes-Oxley (SOX) Act, the Health Insurance Portability and Accountability Act (HIPAA) and the Payment Card Industry (PCI) Data Security Standard (DSS) regulatory requirements for database activity monitoring and audit; and,
Automated cleanup of audit trail data from supported Oracle and non-Oracle databases once that audit data has been securely consolidated in the Oracle Audit Vault repository which helps reduce the operational costs of database auditing.
To further help organizations streamline the database activity monitoring and audit process, and respond to security and regulatory exceptions rapidly, the latest release of Oracle Audit Vault also introduces support for email alerts as well as an automated interface to BMC Remedy IT Service Management Suite, a leading solution for ITIL-aligned service management processes.
According to a recent Independent Oracle User Group (IOUG) 2009 Data Security Report, over 70 percent of respondents use native database auditing to monitor database activity. Oracle leads the DBMS industry in native database auditing capabilities including support for auditing privileged and database users.
With Oracle Audit Vault, audit data is automatically consolidated into a highly secure, centralized repository based on Oracle's proven data warehousing technology. As the audit data is consolidated in the Oracle Audit Vault repository it is analyzed in real-time against enterprise-defined policies. Unauthorized activities are immediately detected, and IT staff notified to help ensure database security.
Oracle Audit Vault features numerous built-in and easily customizable reports to help organizations save time and costs related to compliance reporting. Powerful report customization capabilities include filtering audit data, highlighting rows with condition values as well as generating charts and graphs. Custom reports can be saved and shared within the enterprise or with external auditors.
Oracle Audit Vault is part of a comprehensive and proven portfolio of database security solutions, including Oracle Advanced Security, Oracle Database Vault, Oracle Label Security, Oracle Data Masking and Oracle Total Recall, that help organizations transparently safeguard against data breaches and ensure regulatory compliance without requiring changes to existing applications.

Supporting Quotes

"This new release of Oracle Audit Vault will allow organizations to further automate their database activity monitoring and auditing processes, reducing the overall cost of meeting regulatory requirements and securing critical data," said Vipin Samar, vice president of Database Security, Oracle. "Oracle consulted with IT auditors to help ensure that the new Oracle Audit Vault entitlements and compliance specific reports contain the information needed to pass real-world database audits."
"Oracle Audit Vault reports contain the necessary information auditors are looking for when they conduct database compliance and security audits," said Joseph DeVita, Oracle Governance, Risk and Compliance leader at PricewaterhouseCoopers. "With support for Oracle and non-Oracle databases, Oracle Audit Vault provides a robust solution for enterprise database activity monitoring and audit."

Supporting Resources

IOUG 2009 Data Security Report

About Oracle

Oracle (NASDAQ: ORCL) is the world's largest business software company. For more information about Oracle, please visit our Web site at http://www.oracle.com.

Trademarks

Oracle is a registered trademark of Oracle Corporation and/or its affiliates. Other names may be trademarks of their respective owners.

Contact Info

Eloy Ontiveros
Oracle
+1.650.607.6458
eloy.ontiveros@oracle.com

Kristin Reeves
Blanc & Otus
+1. 415.856.5145
kreeves@bando.com