Manage Security Assessments

You can refresh, copy, move, delete, or rename an assessment.

Oracle Data Safe provides these tools for managing Security Assessments:

Refresh the Latest Assessment

1. From the Security Assessment dashboard, click the Target Summary tab.
2. On the left under Compartment, select the compartment that contains the target database(s) for which you want to view the Security Assessment reports. Select the INCLUDE CHILD COMPARTMENTS check box if you also want to be able to view reports for target databases that reside in child compartments too.
3. On the Target Summary tab, locate the row in the table for your target database, and click View Report.
   The latest Security Assessment report for your target database is displayed.
4. At the top of the page, click Refresh Now.
   The Refresh Now window is displayed.
5. (Optional) In the Save Assessment box, enter a name for the report.
6. Click Refresh Now.
   The latest assessment report for the target database is updated and saved as the specified name.

Save a Copy the Latest Security Assessment

You can save a copy of the latest assessment for a target database under a new name in a compartment of your choice. This feature does not create a new assessment. It only saves a copy of the latest assessment. One use case for this feature may be the need to share the security evaluation results with other lines of business that do not have access to the assessed target's compartment.

You can save a copy of the last assessment only. You cannot save a copy of a saved assessment.

If you do not want to refresh the latest assessment with updated findings then followthese steps:

1. Under Related Resources on the Security Assessment page, click Assessment History.

   The Assessment History page is displayed.

2. Select the compartment that contains the assessment. Optionally deselect INCLUDE CHILD COMPARTMENTS to not list assessments located in the child compartments.

3. Click Save Latest Assessment As.

   The Save Latest Assessment window is displayed.

4. From the Target Database drop-down list, select the name of your target database.
5. In the Assessment Name box, accept the default name for the new copy of the assessment or enter another name.
6. (Optional) In the Saved Assessment Description box, describe the assessment.
7. From the Saved Assessment Compartment drop-down list, select the compartment to which you want to save the assessment.
8. Click Save Latest Assessment.

If you would like to refresh the latest assessment before saving a copy, then follow these steps:

1. On the Security Assessment page, click the Target Summary tab.
2. In the Target Database column, find your target database.
3. In the Last Assessed On column, click View Report.
4. Click Refresh Now. The Refresh Now panel appears.
5. In the Saved Latest Assessment field, you see that a new name is preselected for the copy. You can accept this name or enter another name.
6. Click Refresh Now.

   The page then shows the status UPDATING. Do not leave the page until the status changes to SUCCESS.

Move an Assessment

You can move a saved security assessment (with the exception of the latest assessment) to another compartment. Links to all saved assessments are provided on the Assessment History page.

1. Under Security Center, click Security Assessment.
2. Under Related Resources on the left, click Assessment History.
3. Click the report that you want to move to another compartment.

   The report is displayed.

4. From the More Actions menu, select Move.

   The Move Resource to a Different Compartment dialog box is displayed.

5. Select a compartment, and then click Move Resource.

Change the Name of a Security Assessment

On the Assessment Information tab for a security assessment, you can change the auto-generated name of the assessment to a name that has specific meaning for your organization. You and other users can then more easily identify assessments. For example, you could change the auto-generated name of the security assessment SA_1631303036184 to SA_main_compartment6_db15a. It is advisable to include a segment that indicates the assessment is a security assessment, such as the SA_ prefix in the auto-generated assessment name.

1. From the Security Assessment page, click the Target Summary tab.
2. On the left under List Scope, select the compartment that contains the target database(s) for which you want to view the Security Assessment reports. Select the INCLUDE CHILD COMPARTMENTS check box if you also want to be able to view reports for target databases that reside in child compartments too.
3. (Optional) Under Filters, select a target database from the Target databases list to narrow the scope of displayed metrics and charts.
4. On the Target Summary tab, locate the line in the table for your target database, and click View Report. The Security Assessment Details page is displayed, showing you the latest assessment report for your target database.
5. Click the Assessment Information tab to view details about the assessment.
6. At the Name field (first field at the top) click the pencil icon. Change the name and then click the save icon.
   The page may take a few moments to process the change and display the update. When the status under the large SA icon is SUCCEEDED, you should see the new name.

Delete an Assessment

You can delete any assessment except for the latest assessment of a target database.

1. Under Security Center, click Security Assessment.
2. Under Related Resources on the left, click Assessment History.
3. Click the name of the assessment that you want to delete.

   The report is displayed.

4. From the More Actions menu, select Delete.

   The Confirm dialog box is displayed asking you to confirm the deletion.

5. Click Delete to confirm.

This removes the assessment from the Assessment History.