DG0080-ORACLE11 - Application user privilege assignment should be reviewed monthly or more frequently to ensure compliance with least privilege and documented policy.

Information

Users granted privileges not required to perform their assigned functions are able to make unauthorized modifications to the production data or database. Monthly or more frequent periodic review of privilege assignments assures that organizational and/or functional changes are reflected appropriately.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Develop, document and implement policy and procedures for periodic review of database user accounts and privilege assignments.

Include methods to provide evidence of review in the procedures to verify reviews occur in accordance with the procedures.

Item Details

Audit Name: DISA STIG Oracle 11 Instance v9r1 Database

References: CAT|II, Rule-ID|SV-24668r1_rule, STIG-ID|DG0080-ORACLE11, Vuln-ID|V-3821

Plugin: OracleDB

Control ID: 68179c658af18cde3b6a09416a80abf89df3089cc63f6540ef44c237acb64ac6

Detections

Analytics

DG0080-ORACLE11 - Application user privilege assignment should be reviewed monthly or more frequently to ensure compliance with least privilege and documented policy.

Information

Solution

See Also

Item Details