Professional Documents
Culture Documents
Carl Terrantroy
Director Technology Initiatives ANZ
? 226 Million is…...
• Many Users
• Legislative Changes
3
Integrating Security with
Systems Challenging
• Multiple Point Applications
4. Climate Change
And the winner is…
? How many security features does
Oracle have for 9iR2 ?
1. 5
2. 9
3. 10
4. 12
? What Is The Leading Contributor
For Unplanned Down Time?
1. Water Damage
2. Human Error
3. Software Failure
4. Other
? The Choice Is Yours
4. Legislative Pressures
1 Comprehensive
Data Protection
1 Comprehensive Data Protection
5. When Administered
Oracle Data Protection Solutions
Benefits
Strong encryption for data in flight
Transparent to applications
Easy to implement
Oracle Advanced Security
Transparent Data Encryption
Benefits
Strong encryption for data at rest
No application changes required
Efficient encryption of all application data
Oracle Information Rights Management
Benefits
Secure unstructured data / documents
Prevent data leakage from ad hoc
distribution
Centrally enforce entitlements
Audit document access and usage
Digitally “shred” documents
Oracle Secure Backup
Benefits
Secure data archival
Easy to administer key management
Fastest Oracle Database tape backups
Oracle Database Vault
Benefits
DBA separation of duties
Securely consolidate databases
Enforce whom, how, where, and
when
No application changes required
Finance DBA
? What product controls documents
outside the firewall?
1. Data Vault
2. Secure Backup
4. mySQL
And the winner is…
? Do You Want More Information On?
1. Data Protection
2. Backup Protection
3. Uptime Protection
2
Comprehensive
Identity and
Access
Management
2 Comprehensive Identity & Access Management
4. Federate Identities
Oracle Identity Management
Solutions
Benefits
Centralized, secured identity data
Real-time integrated view of disparate
data stores
Virtual Directory
Oracle Database scalability & reliability
Rapid application deployment
Active
Oracle Directory Databases
LDAP Mainframe
iPlanet, X500
Oracle Identity Manager
Benefits
Automated user on-boarding and off-boarding
Sustainable cost-efficient compliance
Improved security and policy management Email
Marketing
Forecasts
Employee Expenses
Lifecycle
Benefits
Oracle Role Manager
Business
Roles
Provisioning
Workflow
IT Roles
Business
Process
System Privileges Workflow
Benefits
Single authoritative source for business roles
Rapid role mining and modeling
Reduced identity administration costs
Oracle Access Manager
Oracle Enterprise Single Sign-On
UN/Password Kerberos Biometric Smart Card
e-mail / Mainframe
Outlook
Benefits
Centralized authentication and SSO
Consistent policy enforcement
Improved end user experience
Oracle Adaptive Access Manager
Benefits
Proactive, real-time fraud prevention
Contextual authentication/authorization
Web-based software only – easy to deploy
Oracle Identity Federation
Benefits
Secured integration with partners
Reduced administration cost
Improved end user experience
3
Comprehensive
Controls
Enforcement
3 Comprehensive Controls Enforcement
SOX Risk
404 Impact
FFIEC
Likelihood
CASB
1386
Application
EU
Privacy
Directive
HIPAA
Framework
FDA ISO | COSO | COBIT | ITIL
Oracle GRC Controls Suite
User: John Doe
Role: Shipping Clerk
Benefits
Role: Shipping Supervisor
Vendor: Acme
? Do You Produce Audit Reports
1. Yes
2. No
Oracle Audit Vault
Alert Alert Alert
Benefits
Audit Framework Securely consolidate audit data
Simplify compliance reporting
Detect suspicious activity
1. Records Archiving
2. Records Destruction
3. Privacy
1,001 – 5,000
Controls Tested
= 50% $3.2 M
500 – 1,000
Controls Tested
= 5%
398 Controls Tested 0-500 Controls Tested =
5%
Oracle Companies with $5B-$20B Oracle Companies with $5B-$20B
Revenue* Revenue*
90%
Agree or Strongly Agree
Source: 2007 OCEG Benchmark Series: GRC strategy Study
Yet Few Are Doing It
“How would you characterise the
degree of integration between and
among your governance, risk and
compliance practices? ”
Only 16%
Are Fully Integrated
Source: 2007 OCEG Benchmark Series: GRC strategy Study
New Legislation
Oracle Universal Online Archive
eDiscovery
Unparalleled Performance
Records Management
Open API Auto-Classification
De-Duplication
Unparalleled Scalability
eDiscovery
1
2
3
Records Management
API 4
Auto-Classification
De-Duplication
5
6
7
? When does eDiscovery legislation
take effect?
1. 1st July 2008
1. eDiscovery
2. Universal Archive
3. Both
? Do You Want More Information On?
1 5
Poor Excellent
Evaluation - Session 1
• How did you rate the Delivery of the
presentation?
1 5
Poor Excellent
Evaluation - Session 1
• How did you rate the value of this
presentation for your organisation?
1 5
Poor Excellent