I found that many folks tend to think of security as blocking outsiders. Yet, too many times, an internal attack causes more problems, due to lack of auditing for internal users. Further, if a company deploys a VPN with another company, you can possibly have users at another company taking stabs at your data without your knowledge.

Oh boy, what a wonderful world we live in.

–Tom

I guess in smaller (even medium) size organizations, database security is mainly the responsibility of a DBA, and, to alesser extent, database developers. — Thanks Lewis.

The DBSA already exists in many larger organizations. With all of the compliance regulations and issues in recent years, it’s important to have someone responsible for database security that understands the laws and regualtions around data at rest. Understanding rootkits and keeping up with the latest from both Oracle and hackers is an important part of the job.

Thanks,

LewisC
http://blogs.ittoolbox.com/oracle/guide/