Rotate your device back to portrait to use STIG Vault.

Home
Dashboard
Search
STIG Repository
STIG Compare
SCAP Repository
SCAP Compare
CCIs
Guides
Contact

Appearance

Palette

Oracle Database 11g Instance STIG

The Oracle Database 11g Instance STIG (V9 R1) has 94 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

94STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V9 · R1

CurrentPublished Wed Oct 27 2021

Sensitive data should be labeled.

Oracle Database 11g Instance STIG

Assessment Title

Rule Text

Description

Discussion Text

The sensitivity marking or labeling of data items promotes the correct handling and protection of the data. Without such notification, the user may unwittingly disclose sensitive data to unauthorized users.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-15616

Rule

SV-24393r2_rule

Severity

low

Rule Version

DG0087-ORACLE11

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If database does not contain sensitive data, this check is Not a Finding.

If Oracle Label Security is not installed and database contains sensitive data, this is a Finding.

From SQL*Plus:
  select * from DBA_SA_USERS;

Compare results to the requirements for labeling as specified in the System Security Plan.

If label security is not configured as specified in the System Security Plan, this is a Finding.

Implementation Procedure

Fix Text

Develop, document and implement label security requirements.

Install and configure label security in accordance with the System Security Plan.

Monitor and audit changes to the label security configuration.

STIG check 15 of 94 in the Oracle Database 11g Instance STIG checklist

← Previous · V-15615The DBA role should not be assigned excessive or unauthorized privileges.Next · V-15617 →ccess to external objects should be disabled if not required and authorized.