The ISSM must review changes to DBA role assignments.

From Oracle Database 12c Security Technical Implementation Guide

Associated with: CCI-000366

SV-75987r1_rule The ISSM must review changes to DBA role assignments.

Vulnerability discussion

Unauthorized assignment of DBA privileges can lead to a compromise of DBMS integrity. Providing oversight to the authorization and assignment of privileges provides the separation of duty to support sufficient oversight.

Check content

Review policy and procedures documented or noted in the System Security Plan as well as evidence of implementation for monitoring changes to DBA role assignments and procedures for notifying the ISSM of the changes for review. If policy, procedures or implementation evidence do not exist, this is a finding.

Fix text

Develop, document and implement procedures to monitor changes to DBA role assignments. Develop, document and implement procedures to notify the ISSM of changes to DBA role assignments. Include in the procedures methods that provide evidence of monitoring and notification.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.