Field Report: Nuclear Fuel Supplier Tightens Database Security - InformationWeek

InformationWeek is part of the Informa Tech Division of Informa PLC

This site is operated by a business or businesses owned by Informa PLC and all copyright resides with them.Informa PLC's registered office is 5 Howick Place, London SW1P 1WG. Registered in England and Wales. Number 8860726.

IoT
IoT
Software // Information Management

Field Report: Nuclear Fuel Supplier Tightens Database Security

Keeping tabs on enriched uranium? Challenging. Keeping track of database integrity for SOX? Piece of cake.

A spate of compliance mandates -- Sarbanes-Oxley (SOX), HIPPA, Basel II, to name a few -- have forced IT administrators to prove that they have a handle on data integrity. United States Enrichment Corp. (USEC), a uranium enrichment firm, felt the pressure in mid-2005.

"We are a publicly traded company, so SOX was an issue," says Robert Gorrie, information security manager. "Our auditors asked me how I know that all the changes in our database are legitimate. We put some [safeguards] in place that were very labor intensive, but they didn't pass muster." Gorrie's boss, the CIO, saw an ad in a trade journal for Guardium database activity monitoring and auditing software and asked if it would help. It did.

"Guardium is not the panacea," Gorrie says. "We still need a separate trouble ticketing system, and you still need eyes to look at the reports. The good news is it got the auditors off my back."

Gorrie uses Guardium's software to watch activity on USEC's inventory, HR and financial databases, which did not sit well with the DBA initially. "My DBA said, 'My god you can see everything I do!' I said, 'Yeah, but then I don't have to bug you for audit logs, etc.'"

Gorrie adds "you have to trust your DBA, but 'trust' is not something that will keep your auditors at bay."

We welcome your comments on this topic on our social media channels, or [contact us directly] with questions about the site.
Comment  | 
Print  | 
More Insights
Slideshows
IT Careers: Top 10 US Cities for Tech Jobs
Cynthia Harvey, Freelance Journalist, InformationWeek,  1/14/2020
Commentary
Predictions for Cloud Computing in 2020
James Kobielus, Research Director, Futurum,  1/9/2020
News
What's Next: AI and Data Trends for 2020 and Beyond
Jessica Davis, Senior Editor, Enterprise Apps,  12/30/2019
White Papers
Register for InformationWeek Newsletters
Video
Current Issue
The Cloud Gets Ready for the 20's
This IT Trend Report explores how cloud computing is being shaped for the next phase in its maturation. It will help enterprise IT decision makers and business leaders understand some of the key trends reflected emerging cloud concepts and technologies, and in enterprise cloud usage patterns. Get it today!
Slideshows
Flash Poll