Plan de Auditoria para Bases de Datos Multitenant en Oracle.

Abstract

Database auditing is a method that seeks to collect information to analyze, examine and evaluate it in such a way that it makes a judgment and provides the necessary mechanisms to value databases in the cloud using controls and techniques that identify, mitigate and eliminate risks. This work presents a brief description of what Oracle Multitenant databases are, including container and pluggable definitions, as well as three possible standards to implement audits in this type of configuration, giving technical details, possible controls and evaluating the best option to search for the data assurance. The reader will have at his disposal an audit implementation proposal to identify at what level it can be implemented, thereby minimizing vulnerabilities according to the option chosen, knowing why Audit Vault is the chosen one and how its use facilitates the work of systems auditing. in multitenant databases. Keywords: multitenant, container, pluggables