Auditing Scenarios (non tech)

Question

Non tech question on audit logs and determining what you need to switch on, and most importantly, WHY.
Can I ask Oracle DBA’s if you have ever been responsible for defining, documenting and implementing and audit logging and monitoring policy for your critical database(s)? Did you come up with the actual scenarios for which you are turning the audit logs on in the database, and if so are you willing to share some scenarios where there is sensitive data in the database? Say if the database had personal/sensitive data (i.e. medical/health records), so there would be perhaps medium motive for people to misuse the data/gain unauthorised access.
I basically want to lay out, for scenario X, Y and Z, unless you audit A, B and C, these actions aren’t traceable to an individual/workstation. Any help you can give would be most useful. Or any “scenarios” you can add would help, i.e. admin Y decides to go rogue and dump the entire database and sell to the local media.

Answer 1

Hi;
Its deeply question, but if you have soo sensetive data you need to enable monitoring and also monitor DBA activities, there are many documents avaliable about this topic in net.
We also prefer to keep our strong password in case for case sensetive dbs and also sperate password between dba's and managers.
You could rise SR or also can contact wiht local oracle office and ask them to see their solution wiht demos for your issue
Regard
Helios