Re: Sorbanes Oxley for dummies?

Michael,

Arup Nanda wrote a book covering HIPAA, covering auditing, FGA, VPD. Arup wrote a series of papers for OTN, here's one: http://www.oracle.com/technology/oramag/webcolumns/2003/techarticles/nanda_fga.html

Sarb-Ox is so open to interpretation and implementation, that its best to check with your auditors as far as what policies they see as appropriate and how to implement them.

audit_trail=true and "audit session" would be a great start, but sometimes you're better off doing nothing than a piecemeal and incomplete effort.

Paul

On Thu, 13 Jan 2005 10:06:27 -0500, Kline.Michael <Michael.Kline_at_suntrust.com> wrote:
> Has anyone done a good paper on what Sorbanes Oxley means for the DBA
> and that related group?
>
> Some of our "requirements" are quite large and usually based on "I THINK
> Sorbanes Oxley may require it.
>
> It would be nice to know without having to have a law degree.
>
> Michael Kline
> ************************************************
> The information transmitted is intended solely
> for the individual or entity to which it is
> addressed and may contain confidential and/or
> privileged material. Any review, retransmission,
> dissemination or other use of or taking action
> in reliance upon this information by persons or
> entities other than the intended recipient is
> prohibited. If you have received this email in
> error please contact the sender and delete the
> material from any computer.
> ************************************************
>
> --
> http://www.freelists.org/webpage/oracle-l
>

--
http://www.freelists.org/webpage/oracle-l