資料庫審計系統套用實務

內容簡介

為加強國家電網有限公司信息系統套用與資料庫的安全防護，保證套用和資料庫安全，公司建設了業務和資料庫審計系統，旨在對業務人員訪問系統的行為進行解析、分析、記錄、匯總等，以實現事前規劃預防，事中實時監視、違規行為回響，事後合規報告，事故追蹤溯源，保障核心資產的安全運營，提升公司網路安全防護水平。

編制說明

1 適用範圍·································································· 1

2 規範性引用檔案 ························································ 3

3 基本配置要求···························································· 5

3.1 設備配置要求 ··················································· 6

3.2 設備管理 ························································· 7

3.3 賬戶與口令 ······················································ 7

4 基本策略配置管理要求 ··············································· 9

4.1 審計範圍 ······················································· 10

4.2 語句審計 ······················································· 14

4.3 許可權審計 ······················································· 15

4.4 對象審計 ······················································· 16

4.5 核查審計策略 ················································· 174.6 以系統管理員角色登錄檢查································ 17

4.7 以審計管理員角色登錄檢查································ 18

5 專用審計策略配置規範 ·············································· 19

5.1 業務部門管理要求審計······································ 20