Go to primary content

Oracle Product Lifecycle Analytics Security Guide Release 3.5 E70278-01 |
| Contents

Previous | Next |

# A OPLA Secure Deployment Checklist

## A.1 Secure Deployment Checklist

The following security checklist includes guidelines that help secure your database:

1. Install only what is required.

2. Lock and expire default user accounts.

3. Enforce password management.

4. Enable data dictionary protection.

5. Practice the principle of least privilege.

   1. Grant necessary privileges only.

   2. Revoke unnecessary privileges from the PUBLIC user group.

   3. Restrict permissions on run-time facilities.

6. Enforce access controls effectively and authenticate clients stringently.

7. Restrict network access.

   1. Use a firewall.

   2. Never poke a hole through a firewall.

   3. Protect the Oracle listener.

   4. Monitor listener activity.

   5. Monitor who accesses your systems.

   6. Check network IP addresses.

   7. Encrypt network traffic.

   8. Harden the operating system.

8. Apply all security patches and workarounds.

9. Contact Oracle Security Products if you come across any vulnerability in the Oracle Database.