1 Pricing Design Center Security Overview

This chapter provides an overview of Oracle Communications Pricing Design Center (PDC) security.

Basic Security Considerations

The following principles are fundamental to using any application securely:

  • Keep software up to date. This includes the latest product release and any patches that apply to it.

  • Limit privileges as much as possible. Users should be given only the access necessary to perform their work. User privileges should be reviewed periodically to determine relevance to current work requirements.

  • Monitor system activity. Establish who should access which system components, and how often, and monitor those components.

  • Install software securely. For example, use firewalls, secure protocols such as SSL, and secure passwords.

    See "Performing a Secure Pricing Design Center Installation" for more information.

  • Keep up to date on security information. Oracle regularly issues security-related patch updates and security alerts. You must install all security patches as soon as possible.

    See the "Critical Patch Updates and Security Alerts," article on the Oracle Technology Web site:

    http://www.oracle.com/technetwork/topics/security/alerts-086861.html

Understanding the Pricing Design Center Environment

When planning your PDC implementation, consider the following:

  • Which resources need to be protected?

    For example, you need to protect your pricing data, such as your bundle configurations.

  • Who are you protecting data from?

    For example, if your business is planning to roll out new services and pricing data needs to be protected from your competition. Someone in your organization might need to access to your pricing data to manage it. You can analyze your process workflows to determine who needs that access and make sure the data remains protected.

  • What will happen if protections on strategic resources fail?

    In some cases, a fault in your security scheme is nothing more than an inconvenience. In other cases, a fault might cause great damage to you or your customers. Understanding the security ramifications of each resource will help you protect it properly.

Oracle Security Documentation

PDC uses other Oracle products, such as Oracle Database and Oracle WebLogic Server.

See the following documents for more information:

  • Oracle Database Security Guide

  • Oracle Fusion Middleware Securing a Production Environment for Oracle WebLogic Server

  • Oracle WebLogic Server Documentation

Oracle documentation is available from the Oracle Technology Network Web site:

http://docs.oracle.com