Remote administrative access to the database should be monitored by the IAO or IAM.

Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Remote administrative access to the database should be monitored by the IAO or IAM.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-15118	DG0159-ORACLE11	SV-24810r1_rule		Medium

Description
Remote administrative access to systems provides a path for access to and exploit of DBA privileges. Where the risk has been accepted to allow remote administrative access, it is imperative to instate increased monitoring of this access to detect any abuse or compromise.

STIG	Date
Oracle Database 11g Installation STIG	2017-06-29

Details

Check Text ( C-29377r1_chk )
If remote administrative access to the database is prohibited and is disabled (See Check DG0093), this check is Not a Finding. Review policy, procedure and evidence of implementation for monitoring of remote administrative access to the database. If monitoring procedures for remote administrative access are not documented or implemented, this is a Finding.

Fix Text (F-26402r1_fix)
Develop, document and implement policy and procedures to monitor remote administrative access to the DBMS. The automated generation of a log report with automatic dissemination to the IAO/IAM may be used. Require and store an acknowledgement of receipt and confirmation of review for the log report.