Oracle Database 11.2g Security Technical Implementation Guide

The Oracle Database 11.2g Security Technical Implementation Guide (V1 R19) has 203 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

203STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R19

CurrentPublished Fri Jul 24 2020

Audit trail data must be reviewed daily or more frequently.

Oracle Database 11.2g Security Technical Implementation Guide

Assessment Title

Rule Text

Audit trail data must be reviewed daily or more frequently.

Description

Discussion Text

Review of audit trail data provides a means for detection of unauthorized access or attempted access. Frequent and regularly scheduled reviews ensure that such access is discovered in a timely manner.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-54007

Rule

SV-68247r1_rule

Severity

medium

Rule Version

O112-BP-023500

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If the database being reviewed is not a production database, this check is Not a Finding.

Review policy and procedures documented or noted in the System Security plan as well as evidence of implementation for daily audit trail monitoring.  

If policy and procedures are not documented or evidence of implementation is not available, this is a Finding.

Implementation Procedure

Fix Text

Develop, document and implement policy and procedures to monitor audit trail data daily.

STIG check 171 of 203 in the Oracle Database 11.2g STIG checklist

← Previous · V-54005Application user privilege assignment must be reviewed monthly or more frequently to ensure compliance with least privilege and documented policy.Next · V-54009 →Only authorized system accounts must have the SYSTEM tablespace specified as the default tablespace.