Oracle FAQ Your Portal to the Oracle Knowledge Grid
HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US
 

Home -> Community -> Mailing Lists -> Oracle-L -> RE: Griping about auditing (not the Oracle Kind)

RE: Griping about auditing (not the Oracle Kind)

From: Smith, Ron L. <rlsmith_at_kmg.com>
Date: Mon, 25 Jun 2001 07:05:58 -0700
Message-ID: <F001.00336660.20010625070652@fatcity.com>

One of the reasons DBA's are paid well is that they have total control over the production data. No matter what rules the auditors put in place, a DBA could manipulate the data if they wanted to. The company should trust you to do your job and not put up read blocks that prevent you from maintaining the database and making changes in a timely manner.

-----Original Message-----
Sent: Monday, June 25, 2001 9:32 AM
To: Multiple recipients of list ORACLE-L

We've been through an internal audit and I was just wondering if anyone else has to deal with the rather ludicrous requirements I now have. In order to add or resize a datafile I now need to fill out a form and get Senior VP approval and the alert logs must be reviewed every day by a non-DBA in order to be certain that I didn't make any database changes without such approval. The auditors were horrified to discover that not only did I do such things whenever I thought them necessary but that we didn't have a non-DBA review everything I did after an Oracle upgrade to ensure I didn't install any other software.
Fortunately I managed to convince them that yes, I really did need a Unix login (they were skeptical).

So, any similar horror stories?

Jay Miller
Sr. Oracle DBA
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Miller, Jay
  INET: JayMiller_at_TDWaterhouse.com

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing).
--

Please see the official ORACLE-L FAQ: http://www.orafaq.com
--

Author: Smith, Ron L.
  INET: rlsmith_at_kmg.com
Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in the message BODY, include a line containing: UNSUB ORACLE-L (or the name of mailing list you want to be removed from). You may also send the HELP command for other information (like subscribing). Received on Mon Jun 25 2001 - 09:05:58 CDT

Original text of this message

HOME | ASK QUESTION | ADD INFO | SEARCH | E-MAIL US