Remote administrative access to the database must be monitored by the ISSO or ISSM.

From Oracle Database 12c Security Technical Implementation Guide

Associated with: CCI-000366

SV-75983r1_rule Remote administrative access to the database must be monitored by the ISSO or ISSM.

Vulnerability discussion

Remote administrative access to systems provides a path for access to and exploit of DBA privileges. Where the risk has been accepted to allow remote administrative access, it is imperative to instate increased monitoring of this access to detect any abuse or compromise.

Check content

If remote administrative access to the database is prohibited and is disabled, this check is not a finding. Review policy, procedure and evidence of implementation for monitoring of remote administrative access to the database. If monitoring procedures for remote administrative access are not documented or implemented, this is a finding.

Fix text

Develop, document and implement policy and procedures to monitor remote administrative access to the DBMS. The automated generation of a log report with automatic dissemination to the ISSO/ISSM may be used. Require and store an acknowledgement of receipt and confirmation of review for the log report.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.