《现代数据库管理(英文版)》课件—11.pptVIP

Sarbanes-Oxley (SOX) Requires companies to audit the access to sensitive data Designed to ensure integrity of public companies’ financial statements SOX audit involves: IT change management Logical access to data IT operations * IT Change Management The process by which changes to operational systems and databases are authorized For database, changes to: schema, database configuration, updates to DBMS software Segregation of duties: development, test, production * Logical Access to Data Personnel controls Hiring practices, employee monitoring, security training, separation of duties Physic