|
"Through detection of unusual behavior, database activity monitoring can limit insider misuse of database systems, enforce separation of duties for database administrators and limit certain external attacks — all without affecting database performance, requiring structural database changes or forcing application changes. ”Gartner, Inc., Top Five Steps to Prevent Data Loss and Information Leaks, by Rich Mogull, July 12, 2006
"Auditing user activity is obligatory for enterprises seeking reasonable and adequate controls that protect sensitive information from theft or accidental disclosure. Gaining more visibility into the connections between users, data and applications allows enterprises to better understand normal data accesses and catch information breaches and leaks as they occur." Phebe Waterfield, Yankee Group Research
"Compliance is pushing the need to monitor across the data center -- from databases to file servers and application servers. Until now, that has been a big hole in compliance auditing. Fortunately, the market is maturing to fill this void." Trent Henry, Analyst, Burton Group
"Enterprises are responsible for auditing activity to regulated information whether the information resides in databases or on file servers. Having the ability to monitor user interactions with both structured and unstructured data should be a prerequisite for securing business processes.” Pete Lindstrom, Research Director, Spire Security
"There's a large gap in understanding what users are actually doing with data and it has had significant implications for the security of data and regulatory compliance. As the only means for enterprises to know, in real-time, what users are doing with applications and data, activity auditing is an operational imperative for enterprises struggling to relieve the compliance and information theft burden." Jon Oltsik, Senior Analyst, Enterprise Strategy Group |