Separation of duties is one of the fundamental principles of many regulatory mandates such as Sarbanes-Oxley (SOX) and the Gramm-Leach-Bliley Act (GLBA), and as a result IT organizations are placing greater emphasis on separation of duties across all IT functions, especially database administration. Separation of duties involves restricting the privileges held by any one individual in order to prevent conflict of interest, the appearance of conflict of interest, fraud, and errors. But the question on the mind of many administrators is how we prove separation of duties to auditors?
Join us for this informative second of two eSeminars for both database and security professionals alike, where long-time database security industry expert Rich Mogull will make sense of this seemingly confusing requirement and discuss how to implement it in the real-world so that you increase the security of your database while keeping your auditors happy.
Featured topics will include:
- Understanding separation of duties
- Best practices for database auditing
- Oracle solutions for auditing and verifying database separation of duties