Oracle Software Security Assurance (OSSA)

From a security evaluation perspective, Oracle is committed to international standards such as FIPS, a cryptographic module validation scheme, and ISO standards. Oracle’s Global Product Security promotes and monitors the adoption of Oracle Software Security Assurance (OSSA) policies and practices. These include Oracle Secure Coding Standards (SCS), Critical Patch Update (CPU) and Security Alert programs. These programs satisfy your security compliance requirements related to secure coding, security patches, and so on.