Manage Database Security with Oracle Data Safe

Oracle Data Safe, which is included with the Oracle Base Database Cloud@Customer, provides a unified control center that helps you manage the day-to-day security and compliance requirements of Oracle AI Databases.

About Oracle Data Safe

Oracle Data Safe helps you monitor database security, assess security risks, protect sensitive data, and address compliance requirements by using a unified set of security management features.

Your corporate policy requires that you monitor your databases and retain audit records. Your developers are asking for copies of production data for that new application, and you’re wondering what kinds of sensitive information it will contain. Meanwhile, you need to make sure that recent maintenance activities haven’t left critical security configuration gaps on your production databases and that staff changes haven’t left dormant user accounts on the databases. Oracle Data Safe assists you with these tasks and is included with your Oracle Base Database Cloud@Customer.

Oracle Data Safe helps you evaluate security controls, assess user security, monitor user activity, and address data security compliance requirements by evaluating the sensitivity of your data as well as masking sensitive data for non-production databases.

Oracle Data Safe provides the following features:

• Security Assessment: Configuration errors and configuration drift are significant contributors to data breaches. Use Security Assessment to evaluate your database’s configuration and compare it to Oracle and industry best practices. Security Assessment reports on areas of risk and notifies you when configurations change.

• User Assessment: Many breaches start with a compromised user account. User Assessment helps you identify the riskiest database accounts—those accounts which, if compromised, could cause the most damage—and take proactive steps to secure them. User Assessment Baselines make it easy to know when new accounts are added or an account’s privileges are modified. Use OCI Events to receive proactive notifications when a database deviates from its baseline.

• Sensitive Data Discovery: Knowing what sensitive data is managed in your applications is critical for security and privacy. Sensitive Data Discovery scans your database for more than 180 different types of sensitive data, helping you understand what types and how much sensitive data you are storing. Use these reports to formulate audit policies, develop data masking templates, and create effective access control policies.

• Data Masking: Minimizing the amount of sensitive data your organization maintains helps you meet compliance requirements and satisfy data privacy regulations. Data Masking helps you remove risk from your non-production databases by replacing sensitive information with masked data. With reusable masking templates, more than 50 included masking formats, and the ability to create custom formats for your organization’s unique requirements, Data Masking can streamline your application development and testing operations.

• Activity Auditing: Understanding and reporting on user activity, data access, and changes to database structures supports regulatory compliance requirements and can aid in post-incident investigations. Activity Auditing collects audit records from databases and helps you manage audit policies. Audit Insights makes it simple to identify inefficient audit policies, while messages based on audit data proactively notify you of risky activity.

• SQL Firewall Management: Protect against risks such as SQL injection attacks or compromised accounts. Oracle SQL Firewall is a security capability built into the Oracle AI Database 26ai kernel that offers protection against these risks. The SQL Firewall feature in Oracle Data Safe lets you centrally manage and monitor SQL Firewall policies for your target databases. Oracle Data Safe lets you collect authorized SQL activities for a database user, generate and enable policies with allowlists of approved SQL statements and database connection paths, and provides a comprehensive view of SQL Firewall violations across your target databases.

Get Started with Oracle Data Safe

For more information about using Oracle Data Safe, see Oracle Data Safe Overview.