What is Segregation of Duties and how does Audit DB satisfy that requirement?
Audit DB fulfills Auditing Best Practices by imposing Segregation of Duties. What this means is that your Audit data is separated from the individuals who administer Audit DB, and your Audit Trail of data is separated from the individuals who are responsible for managing your secure data. The duties of a DBA are separate from those of an auditor. A DBA is a privileged user in a production database. He/she can maliciously or accidentally cause damage to a database and compromise data integrity. The Agent responsible for collecting the data that provides an audit trail does not need to write anything on the audited server, thus it has read-only privileges and cannot alter or compromise data, and the configuration of what and when to audit is not under the control of the audited database DBA.
Related Questions
- Can the plan satisfy the audit waiver bonding requirement by having persons who handle the non-qualifying plan assets get their own bond?
- I am working full time. What are my options to satisfy the requirement for a practical experience?
- What is Segregation of Duties and how does Audit DB satisfy that requirement?
