IT Security

Are you thinking, or maybe you have already decided, about not upgrading to R12?  Are you concerned about the impeding lack of CPU security patches for 11i?  Have you decided upon the mitigating controls needed to safeguard your...

Are you not applying, or maybe having difficulty in applying, Oracle security patches in a timely manner?  Are you quarters or years behind on security patches?  Due to lack of security patch support by Oracle for software versions older...

Oracle E-Business Suite end-user account passwords may be decrypted and used to commit fraud or bypass application controls.  This inherent security weakness in the application can be fixed in most implementations, however, it seldom is....

Within the Oracle E-Business Suite, numerous pages and forms allow a privileged end-user to enter SQL statements, operating system commands, or modify the application configuration.  Continuing our webinar series on the Hidden Security Threats...

To protect sensitive data, like Social Security numbers, in Oracle E-Business Suite environments, numerous Oracle technologies and third-party products exist that all promise to be your next silver bullet.  However, implementing these...

Most IT Security personnel are familiar with the security requirements of networks and operating systems. But many in IT Security are not aware of the security risks inherent in their company’s Oracle production databases. Issues concerning the...

When you externally deploy Oracle E-Business Suite Internet enabled modules such as iSupplier, iRecruitment, or iStore, you have potentially opened your entire environment to the Internet including all your financial and HR data. This educational...

When you externally deploy Oracle E-Business Suite Internet enabled modules such as iSupplier, iRecruitment, or iStore, you have potentially opened your entire environment to the Internet including all your financial and HR data. There are specific...

All Oracle E-Business Suite implementations that "store, process, or transmit cardholder data" must comply with Payment Card Industry (PCI) Data Security Standard 3.0 regardless of size or transaction volume. The PCI Data Security Standard (DSS) 3.0...

Oracle Database session information includes database user name, operating system user name, host, terminal, IP address, module, program, timestamps, session ID, and other details. These values are critical to auditing and identifying the actual end...