Question

Write an essay of at least 500 words discussing the reasons for the two new auditing roles in Oracle 12c. Why did Oracle consider them necessary? What problems do they solve? How do they benefit companies?  

Please don't rewrite already existing chegg anws

Answer 1

Two audit roles are introduced in oracle 12.c , they are AUDIT - ADMIN and AUDIT VIEWER. They enables us to enforce least privilege principles. They provide separation of duty and flexibility for companies to assign specific users to manage audit settings and view audit activities. They unifies the existing audit trails into a single audit trail which enables simplified management and increased security of audit data. Some of their advantages are :
1 . They group audit options into a simple audit policy.
2 . Allows simple action based audit configuration.
3 . They set condition based audit configuration
4 . They exempt users from being audited.

Audit admin is used for managing audit policies like auditing , initiating house keeping , retention of audit data , etc. It enables users to view and analyze data and also enables them to configure auditing. Hence it configures and analyses audit data,.
Audit viewer is used to make reports on audit data and to view them hence making external auditors to only view and analyze them. It also analyzes data in a quick and intuitive fashion.
They were introduced to address the following security challenges like :
1 . Relying on a read only audit trial table.
2 . Auditing the works done by users related to audit configuration.
3 . Auditing any SYS user auditable actions.
4 . Separating audit administration duties with adult administration roles.
They also address the following performance limitations like :
1 . Negligible overhead using System Global Area ( SGA ) queues for accumulating audit records.
They also solve some other security problems like the audit admin makes it easier to view audit records and clean up audit trials and also points to any exclusion from audit policies. The audit viewer makes it easier for external auditors to view and audit data . The older versions was not restricted for every users to enable or disable auditing on their objects. But it is not possible in the new version.
Oracle 12 c is a relief to users efforts to standardize and automate cloud based database services and also introduced audit admin and audit viewer.
Some essential elements are :
1 . They provide system privileges and roles.
2 . They ensure data integrity and availability by auditing changes for schema objects
3 . They check the SQL statement execution and operations to ensure that no one modifies or delete sensitive data.
4 . They monitors user activity to ensure no malicious operations are performed.
Oracle database version 12 c introduced unified auditing which gives a better consistency of the auditing data apart from the older versions.
All the records are stored in new schema so they are easily accessible. It enables us to concentrate on failed activity, modifications to instance configuration and data deletion.
Some of their limitations are:
1 . They degrade Oracle performance.
2 . Does not include any interactive searching feature.
3 . Does not include alerts on threat patterns which may occur during execution of different users.