Information Systems homework help. Topic:
The Oracle database provides security in the form of threat, Risk, authentication, authorization, and auditing. Authentication ensures that only legitimate users gain access to the system. Authorization ensures that those users only have access to resources they are permitted to access. Auditing ensures accountability when users access protected resources.
Although these security mechanisms effectively protect data in the database, they do not prevent access to the operating system files where the data is stored. Transparent data encryption enables encryption of sensitive data in database columns as it is stored in the operating system files. Good key management is essential for companies implementing database encryption, since access to encrypted data ultimately comes down to access to the key.
Encryption isn’t secure without a Mitigating Risk Plan. Do you agree or disagree.