Database Security

Running head: DATABASE SECURITY
Database Security
Name of Student-
Name of University-
Author’s Note-

DATABASE SECURITY1
Glance of SOX
SOX is Sarbanes-Oxley Act which is also known as Accounting Reform Protection Act.
This act was signed as law on 30th July, 2002 [2]. The main goal of this act was to increase the
transparency in the corporate governance as well as financial reporting. This act also formalizes
a particular system for the internal checks as well as internal balances.
Logging and Separation of duties with SOX
The main requirement for Sox includes duties separation used in process of change
management. Separation of duties states that same person is not allowed to make change in
developing the database and also cannot move the change in production database [4]. This
particular requirement is done to eliminate different changes in system affecting financial
reporting. When the processes included in SOX are performed in an organization manually, then
maintaining the compliance becomes time-consuming as well as becomes costlier. For
implementing the separation of duties in the SOX act, access should be assigned to the
development team and tasks should be assigned on the basis of role that is performed by each of
the member. All the individuals should be given permission to do the job or tasks in the system.
Database auditing and monitoring used in SOX compliance
For accelerating the database auditing as well as monitoring the database, SOX
compliance is needed so that the activity of database becomes visible [3]. There should have
been advanced reporting, access control, reporting and auditing features. All these features helps
in establishing the accountability environment ensuring the team to achieve security health
assessment, maintain the privacy via internal controls, prove claims, as well as help to implement
the disclosure when it is needed. Automated scheduling for the SOX workflows as well as helps