RE: Sarbanes Oxley reporting

An interesting thread that also happens to coincide nicely with a directive we just received yesterday.

Our agency (in it's infinite wisdom) decided to adopt the CIS report for Oracle databases (http://www.cisecurity.org/bench_oracle.html) in it's entirety, with full compliance by June 2007. Probably half of our databases are created and run by scientists that simply saw Oracle as a larger Access database with more horsepower, and treat it accordingly. An awful lot of them run Oracle as their own personal database for their project and have little understanding of database administration, so this exercise should prove interesting. Maybe some will finally realize that they should merge with others and possibly let somebody with a bit of Oracle knowledge set them up and run them, but after all, this is the government.

I doubt if anyone in "the group" that made the decision knows anything about databases, let alone Oracle (to include the spelling), or even realize what most of our Oracle databases consist of.

I have discovered though that SQL Developer has some pretty nifty built-in reports that cover many of the different "reports" others have mentioned in this thread, and they can be exported as XML files that should be able to be read back into Excel or whatever people want to use. Taking a quick look at them, they seem pretty useful, has anybody else taken a look at them?

                               Bill Ferguson

--

http://www.freelists.org/webpage/oracle-l Received on Tue Feb 13 2007 - 09:59:36 CST