Secure Systems Security Auditing

Your enterprise databases are continually being accessed and updated by many different users. This database activity may be the result of interactive users running a variety of transactions and it may also be coming from batch programs. Aggregate performance statistics can help you organize the data efficiently, but information about individual data accesses is important, too.

Database Event Auditing

Who is accessing the order database and at what times? Which programs update the employee status table? Who has been looking at the salary table and which workstations were used? Did Officer Jones pull up the speeder’s driving record as stated policy requires?

These types of questions are not a matter of idle curiosity; their answers are important in assessing the effectiveness of your security and verifying that you comply with corporate policies and applicable regulations.

With database event auditing tools you can learn, for example, that Bob ran transactions from Bill’s workstation. And you can also identify the date and time it happened, what data was affected and other relevant information.

Database Server Event Analyzer

This software lets you choose the types of accesses to log to an audit trail along with the level of detail to include. When you need to analyze a set of audit data, it’s easy to transform it from its internal format into an RDMS 2200 database. Or to any other database for that matter. Then you can take advantage of the flexibility of third-party product Crystal Reports and other PC-based tools to produce charts or graphs, browse and search the audit data and drill down to look for anomalies, correlations or trends.

System Log Analysis and Reports

OS 2200 logs security-relevant information that helps your security administrator monitor the system and look for incidents that identify a potential cause for concern.

Both the System Log Analysis and Reports for ClearPath OS 2200 and a third-party product, TeamQuest Log Analyzer, produce reports that can help your administrator detect repeated logon failures, repeated file access rejections, unexpected changes to the security database, unexpected changes to the security attributes of files and the repeated or unusual use of a privileged user-id.

These reports can provide you an early warning so that you can take preventive action – before a problem arises.