Determine Your Security Needs

Many resources in the production environment can be protected, including information in databases accessed by Oracle BPM and the availability, performance, applications, and the integrity of the website. When deciding the level of security to provide, consider the resources you want to protect .

For most websites, resources must be protected from everyone on the Internet. But should the website be protected from the employees on the intranet in your enterprise? Should your employees have access to all resources within the Oracle BPM environment? Should system administrators have access to all Oracle BPM resources? Should system administrators have access all data? You might consider giving access to highly confidential data or strategic resources to only a few well trusted system administrators. Perhaps it would be best to allow no system administrators access to the data or resources.

In some cases, a fault in your security scheme is easily detected and considered nothing more than an inconvenience. In other cases, a fault might cause great damage to companies or individual clients that use the website. Understanding the security ramifications of each resource will help you protect it properly.