Oracle Data Safe supports Oracle Cloud databases as well as Oracle on-premises databases. Whether working with on-premises or cloud databases, DBAs need to take measures to protect the enterprise data under their care.
Oracle Database Cloud Services provide different sets of security features based on database type and edition. Oracle Autonomous Database automatically takes care of several security concerns for customers including the following:
However, even in the cloud, security is a shared responsibility between the provider and the user, and users still have to manage some things such as the following:
Oracle Data Safe addresses this with integrated data security functionalities accessible to any Oracle Cloud customer through a cloud-based control center. Oracle Data Safe combines information about users, data and data infrastructure to enable users to manage risks to their sensitive data.
To protect your enterprise data, you need to be able to answer several questions such as:
Data Safe allows customers to perform security and user assessments of their database and database users.
Data Safe manages database server audit policies and securely collects, removes, and retains audit data from database servers.
Data Safe discovers sensitive data in databases.
Data Safe masks sensitive data in development and test databases.
Data Safe dashboard allows customers to quickly assess and then drill down to review risk.
The Oracle Data Safe control center provides an overview of risks associated with your users, sensitive data, and platform. Users select from various features available in the control center to assess users and security, search for sensitive data, manage audit policies, and mask data for use in test, development, and analysis.
We’ve worked hard to remove the complexity from database security, while at the same time giving you the flexibility to meet your security control objectives. The Data Safe user interface is intuitive and uses intelligent defaults. For example, it automatically recommends data masking techniques for the discovered sensitive data if you want to remove that sensitive data from a nonproduction copy of the database. If the defaults are adequate for your needs, you can complete the entire masking process—without typing a single line of code.
Compliance laws such as the European Union (EU) General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA) levy requirements on companies to safeguard the privacy of their customers. Data Safe helps you with your various compliance requirements such as identifying where sensitive data is located, masking sensitive data for nonproduction use, securely capturing audit data, and so forth.
The cloud requires a shared responsibility model for security. Oracle has highly automated tools to provide the Oracle portion of the shared security model, including network security and monitoring, OS and platform security, database patches and upgrades, administrative separation of duties, and data encryption by default. Customers are responsible for managing the security of data such as user permissions, protecting sensitive data, and setting up appropriate audit policies. Data Safe provides tools to help you with your portion of security management.
Data Safe offers a unique capability in the industry. By making these essential data security functionalities available to all Oracle Cloud customers, it sets a new standard for cloud database security.
Data Safe is available in all regions where Autonomous Database is supported.
Data Safe works with the following Oracle Databases:
Yes, we added support for on-premises databases in 2020.
Support for Cloud at Customer databases is currently available in a Limited Availability program. Please contact us if you would like to participate or if you would like more information.
If you are using a cloud database on Oracle Cloud, getting started is easy.
No prior specialized security expertise is needed. We’ve worked hard to remove the complexity from database security, while at the same time giving you the flexibility to meet your security control objectives. The Data Safe user interface is intuitive and uses intelligent defaults. If the defaults are adequate for your needs, you can easily run through all the features of Data Safe. And just in case you have a question, there is a comprehensive online help to guide you through the different features.
If you are a paid subscriber to any cloud database on Oracle Cloud Infrastructure, you can use Data Safe at no additional cost for these databases. You can store up to 1 million audit records per month per target database free of charge. If you exceed this limit, you may incur additional costs. In addition, we built in some limits to prevent abuse. You can find more information about usage and service limits here.
By default, we keep audit data for 12 months, but you can change the retention period if needed.
As with all other services on Oracle Cloud Infrastructure, full support is included. You can submit your support requests through the Oracle Support portal using your Oracle Customer Support Identifier.
For more information, please see the Oracle Data Safe page on oracle.com. A variety of helpful information is available there, including the datasheet, technical briefs, and videos.