Oracle Data-Safe and it's use case

 Data Safe service is oracle's offering on Oracle cloud. It is similar to Database Security Assessment Tool (DBSAT) for the on-premises databases.

Data Safe is a unified control center that helps you to evaluate security controls, assess user security, monitor user activity, and address data security compliance requirements for your database by evaluating the sensitivity of your data as well as masking sensitive data for non-production databases.

To start using the Data Safe features, you need to register your database with it.

The autonomous database can be registered using a single click from ADB console page. For Baremetal/VM DBCS system it can be registered from the data safe console wizard.

On-premise and databases on other clouds can also be registered with Data Safe using connectors.

Data Safe provides the following features:

• Security Assessment: Ensure your databases are securely configured.
• User Assessment: Identify which database users present the highest risk, review privileges granted to those users, and check the user activity that has been captured for those users.
• Sensitive Data Discovery: Discover the location and amount of sensitive data stored across your database schemas, tables and columns.
• Sensitive Data Masking (for non-production databases): Mask data in your non-production databases while maintaining complex data relationships.
• Activity Auditing: Track database user activity and raise alerts on risky actions. Manage audit policies and store your audit records centrally in Data Safe.

Data Safe is free for Cloud DBCS and autonomous database but charges are incurred if use audit records. 

We'll see the sample use case of Data-Safe in our next blog.