Oracle Security, Identity, and Compliance

A security-first approach to protect customer workloads

Oracle Cloud Infrastructure is designed to protect customer workloads with a security-first approach across compute, network, and storage—down to the hardware. It’s complemented by essential security services to provide the required levels of security for your most business-critical workloads.

Products and features

• Monitoring and mitigation with Cloud Guard, Security Zones, Vulnerability Scanning, and Cloud Guard Threat Detector
• Oracle Cloud Infrastructure Identity and Access Management
• Network Firewall
• Key Management
• Web Application Firewall
• Threat Intelligence
• Bastion
• Certificates
• Isolated network virtualization
• Root of trust
• Autonomous Linux
• Compliance
• Global footprint with many regions
• Government Cloud

Safeguard your most valuable asset—data

Reduce the risk of a data breach and simplify compliance both on-premises and in the cloud with Oracle Database security products that include encryption, key management, data masking, privileged user access controls, activity monitoring, and auditing.

Products

• Data Safe
  One console to monitor users, data, and security configuration
• Database Vault
  Controls on privileged users and database operations
• Advanced Security
  Transparent data encryption (TDE) and data redaction
• Key Vault
  TDE keys and secrets (passwords, PKI, SSH) management
• Audit Vault and Database Firewall
  Auditing, activity monitoring, and security posture management
• Data Masking and Subsetting
  Sensitive data discovery, masking, and subsetting
• Label Security
  Label-based, row-level access control
• Database Security Assessment Tool
  Identifying misconfigurations and excessive user privileges

Extend security and risk mitigation capabilities

Securing critical applications against fraud and misuse is essential for protecting your organization’s business-critical data within Oracle and non-Oracle services. Fine-grained access controls, plus visibility and monitoring for security violations and threats, are crucial application security components of today’s layered defenses.

Products

• OCI Web Application Firewall for Oracle Fusion Applications
• OCI Identity and Access Management
• Oracle Risk Management Cloud

Secure user access to data and applications

Oracle Identity and Access Management provides scalability with industry-leading capabilities. Reduce operational costs and achieve rapid compliance with regulatory mandates. Secure sensitive applications and data—regardless of whether they’re hosted in the cloud or on-premises.

Products

• Oracle Cloud Infrastructure Identity and Access Management
• Identity Governance
• Access Management
• Directory Services

Strong security practices and principles for built-in protection

Oracle protects the confidentiality, integrity, and availability of the data and its systems that are hosted in the cloud, no matter which cloud product is chosen.

Resources

• Corporate security practices
• Oracle Software Security Assurance
• Oracle Cloud security practices
• Compliance and privacy programs
• Global Customer Support

Integrated and managed security services with expertise

When transitioning to cloud or multicloud environments, security teams are challenged by an expanding attack surface, alert overloads, and a cybersecurity skills shortage.

Why choose Customer Success Services

• Proactive threat monitoring
• Improved visibility of vulnerabilities
• Enhanced data security controls
• Unified identity and access management
• Increased efficiency in addressing compliance requirements

Address the challenges of an increasingly complex regulatory environment

Oracle recommends that cloud customers formally analyze their cloud strategy to determine the suitability of using the applicable Oracle cloud services in light of their own legal and regulatory compliance obligations. Oracle provides information about frameworks for which an Oracle line of business has achieved a third-party attestation or certification for one or more of its services in the form of attestations.