1 Oracle Audit Vault

Auditing plays an increasingly important role in the areas of compliance, privacy, and security. Satisfying compliance regulations such as Sarbanes-Oxley and mitigating the risks associated with the insider threat are among the top security challenges businesses face today. The use of audit data as a security resource remains very much a manual process, requiring IT security and audit personnel to first collect the audit data, and then sift through enormous amounts of dispersed audit data using custom scripts and other methods.

Oracle Audit Vault is a powerful enterprisewide solution that efficiently consolidates, detects, monitors, alerts, and reports on audit data for security auditing and compliance. Oracle Audit Vault provides the mechanisms to collect audit data generated by Oracle9i Database Release 2, Oracle Database 10g Release 1, Oracle Database 10g Release 2, and forward.

1.1 Introducing Oracle Audit Vault

Oracle Audit Vault is comprised of two components that are licensed separately. They are:

• Oracle Audit Vault Server – The Audit Vault Server is comprised of a repository, Audit Vault Console, and the Audit Vault application that consolidates and secures the audit trail data for centralized reporting and alerting.

• Oracle Audit Vault Collection Agent – The Audit Vault Collection manages the movement of audit trail data from audit sources to the Audit Vault Server.

1.2 Special-Use Licensing

Oracle Audit Vault is a complete stacked application. As part of the Audit Vault installation, Oracle Database 10g Release 2 (10.2.0.3) with the Database partitioning, Oracle Advanced Security, and Oracle Database Vault options is installed. The stacked application, database, installed options, and Audit Vault components may not be used or deployed for other purposes.

Oracle Application Server Containers for J2EE (OC4J) is included with Audit Vault. This embedded version is provided solely to support Oracle Enterprise Manager (Database), Advanced Queuing Servlet, Audit Vault Console, and may not be used or deployed for other purposes.

The Audit Vault Oracle Home software use is restricted to support the Audit Vault database repository and no other databases created using the Audit Vault executables are supported.

Oracle Real Application Clusters and Oracle Data Guard may be licensed separately to use in conjunction with Audit Vault.