Documentation - V-270574

Title

Oracle Database must take steps to protect data at rest and ensure confidentiality and integrity of application data.

Description

<VulnDiscussion>This control is intended to address the confidentiality and integrity of information at rest in nonmobile devices and covers user information and system information. Information at rest refers to the state of information when it is located on a secondary storage device (e.g., disk drive, tape drive) within an organizational information system. Applications and application users generate information throughout the course of their application use. User-generated data and applicati...

Fix Text (Documentation Requirement)

Apply appropriate controls to protect the confidentiality and integrity of data at rest in the database. If no site-specific precautions are in place, use Oracle Advanced Security Option to encrypt data at rest. If Oracle Advanced Security Option is not an option, use site-specific procedures to secure data at rest.