Capgemini technology vision for Oracle Database Security. Providing an introduction to Oracle Security for the Database and how to work with Capgemini to protect companies and their data

1. Oracle Database Security – General Introduction
Johan Louwers -- Global Oracle Architect Office
Technology Vision

2. 2Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Just a number”
$1,000,000,000,000Is lost by businesses every
year due to cybercrime
That is a Trillion dollars a year

3. 3Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Just some examples”
 Some major data breaches in 2015
ANTHEM HEALTH INSURANCE
80,000,000 people affected due to the loss of patient records
INTERNAL REVENUE SERVICE
300,000 people affected due to the loss of tax records
PREMERA BLUE CROSS
11,000,000 people affected due to the loss of patient records
UCLA HEALTH SYSTEM
4,500,000 people affected due to loss of unencrypted passwords

4. 4Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Just some examples”
 Some major data breaches in 2015
US PERSONELL MANAGEMENT OFFICE
22,200,000 people affected due to loss of confidential information
HARVARD UNIVERSITY
8 colleges affected due to compromised databases holding personal data
LASTPASS
7,000,000 passwords compromised
ASHLEY MADISION
37,000,000 people affected due to the loss of personal data

5. 5Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Just some facts”
 IT Security spend has doubled...but we’re no safer
VULNERABILITY
Management
ENDPOINT
Security
EMAIL
Security
NETWORK
Security
Current focus
IT spend has primarily focused on the perimeter
Required focus
Attacks are in general aimed against the core

6. 6Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Just some facts”
 IT Security spend has doubled...but we’re no safer
96%
Of breached records are from databases
80%
Of breached records involve application and web services
66%
Of sensitive data is stored in relational databases
94%
Of breached records involve compromising servers

7. 7Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Just some facts”
 IT Security spend has doubled...but we’re no safer
97%
Of attacked are preventable if you protect data at the core
Databases
Specific security for databases is vital and often overlooked
Infrastructure
Security should focus strongly on infrastructure

8. 8Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Ensure you secure your DATA”
Oracle Key Vault
Oracle Audit Vault
Oracle Database Firewall
Oracle Advanced Security
Oracle Database Vault
Oracle Label Security
Oracle Data Masking
Oracle Enterprise manager

9. 9Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Ensure you secure your DATA”
 Ensure you secure your DATA
Oracle Advanced Security
Comply with privacy and regulatory
mandates that require companies to
encrypt and redact application data such
as credit cards, social security numbers,
or personally identifiable information
(PII). By encrypting data at rest and
masking data whenever it leaves the
database, Oracle Advanced Security
provides the most cost-effective solution
for comprehensive data protection.

10. 10Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Ensure you secure your DATA”
 Ensure you secure your DATA
Oracle Database Vault
Comply with data privacy and protection
mandates that restrict the use of actual
customer data. Oracle Database Vault
proactively protects application data
stored in Oracle Database from being
accessed by unauthorized privileged
database users.

11. 11Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Ensure you secure your DATA”
 Ensure you secure your DATA
Oracle Data Masking
Comply with data privacy and protection
mandates that restrict the use of actual
customer data. With Oracle Data
Masking and Subsetting Pack, sensitive
information such as credit card or social
security numbers can be replaced with
realistic values, allowing production data
to be safely used for development,
testing, or sharing with out-source or off-
shore partners.

12. 12Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Ensure you secure your DATA”
 Ensure you secure your DATA
Oracle Label Security
Designed to meet public-sector
requirements for multilevel security and
mandatory access control, Oracle Label
Security provides a flexible framework
that both government and commercial
entities worldwide can use to manage
data access on a “need to know” basis.

13. 13Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Ensure you secure your DATA”
 Ensure you secure your DATA
Oracle Database Firewall
Monitor Oracle and non-Oracle database
traffic to detect and block threats. Block
incoming SQL statements based upon
white and black listing. Improves the
overall security and provides additional
security on top of standard network
firewalls.

14. 14Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Ensure you secure your DATA”
 Ensure you secure your DATA
Oracle Audit Vault
Improve compliance reporting by
consolidating audit data from databases,
operating systems, directories, and other
sources.

15. 15Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Ensure you secure your DATA”
 Ensure you secure your DATA
Oracle Key Vault
Oracle Key Vault enables customers to
deploy encryption and other security
solutions by centrally managing
encryption keys, Oracle Wallets, Java
Keystores, and credential files.

16. 16Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Ensure you secure your DATA”
 Ensure you secure your DATA
Oracle Enterprise manager
improve overall security monitoring and
compliancy by using a centralized
solution for monitoring systems and
ensuring security framework compliancy
is in place on all components via real-
time monitoring.

17. 17Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Oracle Security – General Introduction
“Working with Capgemini”
 Capgemini services and solutions
Capgemini provides a wide range of services and solutions for Oracle
technology and the required security that should accompany the IT footprint in
which Oracle technology is used.
• Architecture services
Capgemini provides a wide range of architecture services on Oracle
Technology also including security architecture services and security roadmap
services to ensure security is embedded on an architectural level in your
organisation
• Security assessment services
Security and technology teams with a focus on Oracle technology provide
customers the option to do a assessment and provide the requried advice on
how to strengthen security.
• Implementation and maintenance services
Implementation and maintenance of Oracle security products and security
features can be provided by the Capgemini global Oracle teams
• Security watch services
24*7 active monitoring and acting upon security related incidents in line by the
Capgemini international monitoring and operating centre can be provided.

18. 18Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Capgemini Oracle Architect Office – Background Information

19. 19Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Capgemini - Global Oracle Architect Office
“Capgemini OAO key mission”
 Technology Standards
Creating and maintaining the global oracle technology standards and implementation
roadmaps to ensure customers receive the Oracle & Capgemini best practice based
solutions to provide the most optimal business value.
 Technology Vision
Identifying, tracking, prototyping and developing new solutions and technologies, using
a combination of forward-thinking visionary and practical realism to provide customers a
practical future roadmap and a clear direction.
 Technology Solutions
Ensuring that the technological solutions created by both Oracle and Capgemini are
positioned as a unified solution for our customer and the most optimal technological
advantages of the products are used.
 Business Value
Providing customers with the most optimal business value with the lowest TCO to
support customer is accelerating in their day to day operations and achieving there
goals with Oracle technology as an enabler.
Technology
Vision
Technology
Standards
Technology
Solutions
Business
ValueOAO

20. 20Copyright © Capgemini 2015. All Rights Reserved
Global Oracle Architect Office
Technology
Vision
Technology
Standards
Technology
Solutions
Business
ValueOAO
Capgemini - Global Oracle Architect Office
“Capgemini OAO core team”
 Sunil Krishnanunni
Senior Architect – Asia Pacific
Sunil.Krishnanunni@capgemini.com
 Del Albrecht
Senior Architect – North America
Delwin.Albrecht@capgemini.com
 Johan Louwers
Lead Architect – Global (EMEA)
Johan.louwers@capgemini.com
 Global Oracle Architect Office contact:
GlobalOAO.bnl@capgemini.com

21. The information contained in this presentation is proprietary.
© 2014 Capgemini. All rights reserved.
www.capgemini.com
About Capgemini
With almost 140,000 people in 40 countries, Capgemini is one of
the world’s foremost providers of consulting, technology and
outsourcing services. The Group reported 2013 global revenues
of EUR 10.1 billion.
Together with its clients, Capgemini creates and delivers
business and technology solutions that fit their needs and drive
the results they want.
A deeply multicultural organization, Capgemini has developed its
own way of working, the Collaborative Business ExperienceTM,
and draws on Rightshore®, its worldwide delivery model.
Rightshore® is a trademark belonging to Capgemini