Software // Information Management
News
2/23/2007
05:18 PM
Connect Directly
RSS
E-Mail
50%
50%

Field Report: Nuclear Fuel Supplier Tightens Database Security

Keeping tabs on enriched uranium? Challenging. Keeping track of database integrity for SOX? Piece of cake.

A spate of compliance mandates -- Sarbanes-Oxley (SOX), HIPPA, Basel II, to name a few -- have forced IT administrators to prove that they have a handle on data integrity. United States Enrichment Corp. (USEC), a uranium enrichment firm, felt the pressure in mid-2005.

"We are a publicly traded company, so SOX was an issue," says Robert Gorrie, information security manager. "Our auditors asked me how I know that all the changes in our database are legitimate. We put some [safeguards] in place that were very labor intensive, but they didn't pass muster." Gorrie's boss, the CIO, saw an ad in a trade journal for Guardium database activity monitoring and auditing software and asked if it would help. It did.

"Guardium is not the panacea," Gorrie says. "We still need a separate trouble ticketing system, and you still need eyes to look at the reports. The good news is it got the auditors off my back."

Gorrie uses Guardium's software to watch activity on USEC's inventory, HR and financial databases, which did not sit well with the DBA initially. "My DBA said, 'My god you can see everything I do!' I said, 'Yeah, but then I don't have to bug you for audit logs, etc.'"

Gorrie adds "you have to trust your DBA, but 'trust' is not something that will keep your auditors at bay."

Comment  | 
Print  | 
More Insights
The Agile Archive
The Agile Archive
When it comes to managing data, donít look at backup and archiving systems as burdens and cost centers. A well-designed archive can enhance data protection and restores, ease search and e-discovery efforts, and save money by intelligently moving data from expensive primary storage systems.
Register for InformationWeek Newsletters
White Papers
Current Issue
InformationWeek Must Reads Oct. 21, 2014
InformationWeek's new Must Reads is a compendium of our best recent coverage of digital strategy. Learn why you should learn to embrace DevOps, how to avoid roadblocks for digital projects, what the five steps to API management are, and more.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Archived InformationWeek Radio
A roundup of the top stories and community news at InformationWeek.com.
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.