Security

 

Oracle Cloud Security The Most Secure Cloud. The Most Viable ERP Cloud Vendor Septemer 2014 !"in"1! #einar

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

1

 

Agenda #1 Concerns with the Cloud #2 SaaS Security Checklist #3   racle Security Solutions #3 #! Custo"er Security uote #$ SaaS Security Resources

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

 

 1. Concerns %ith the Cloud !%& o& survey respondents have with data security concerns 

3$& o& survey respondents have re'ulatory or co"(liance issues

33& o& survey respondents have reliability concerns 

Source' ()C Cloud*rac+er Survey 201$, n-110

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

$

 

2. SaaS Security Chec+list racle 3

endor iaility

)

(solated *enancy nied Access Controls

) )

)ata esidency and Compliance

)

)ata Center Operations

)

Advanced )ata Security

) Copyright © 2014 Oracle and/or its afliates. All rights reserved.

4

 

$. iale To( to botto" security *ro" an e+(erienced cloud (artner ,dentity Mana'e"ent 7C8

C9

: ;

•

•

-ata ,solation •

Oracle is a protale and proven tech leader &or over $! years ong history and proven cloud port&olio that scales &rom small to large enterprises Continuous 5) and roadest port&olio o& integrated services %ith 14 yrs e6periencecloud running enterprise clouds

1 

)ata Centers #orld%ide

•

Supports 2 million users 5 22 illion transactions each day

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

!

 

$. (solated *enancy Shared resources where it "akes sense. ,solated where it doesn/t 0ll the benets o* SaaS (lus MultiTenancy Model

,solated Tenancy Model

•

8ore security, less ris+ <separate dataases =

•

>le6ile pgrades <you choose=

•

8inimi?ed @noisy neighor syndrome <per&ormance=

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

B

 

$. Access Controls ne co""on strate'y *or better control 4nied 0ccess Controls C ontrols 0cross 5our 6usiness Centrali?ed (dentity 8anagement %ith >ederated •

Single" Sign On ensures that have access to relevant data only approved users : ;

7C8

C9

$rd ;arty

Centralied ,dentity Mana'e"ent

•

•

•

Control and congure access to application &unctions and data (nvo+e mapping rules &or each o &unction %ith auto provisioning DACE leveraging industry est practices &or least privilege to prevent unauthori?ed access to condential in&ormation Eole Dased Access Controls

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

F

 

$. ocali?ed )ata esidency and Compliance 7e are where you are 8ee( -ata local •

•

•

1 data centers located across the gloe Oracle adged security e6perts sa&eguard your sensitive data Dest in class, industry ased compliance

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

G

 

$. #orld #orld Class Security and Compliance 8ee(in' your data sa*e and co"(liant with w ith industry standards ;C(

HDA

;ayment card industry data security standards s tandards

Hramm each"Diley Act

I(S* S;G00"!$

SSA:1B <SOC 1= And SOC 2 Statement on Standards &or Attestation :ngagements

Iational (nstitute o& Standards and  *echnology  *echnology

>(S8A

(SO 2F001 An in&ormation security management system standard

>ederal (n&ormation Security 8anagement >ederal Act

>edA8;, H"Cloud

J )ata ;rotection Act

7(;AA

: )ata ;rivacy )irective !/4/:C

7ealth (nsurance ;ortaility and Accountaility Act

)(ACA; )O) (n&ormation Assurance Certication and Accreditation ;rocess

>(;S 140"2 >ederal >ede ral (n&ormation ;rocessing Standard

Copyright © 2014 Oracle and/or its afliates. All rights reserved.



 

$. )ata Center Operations ,nside the data center 2! +9 :;ollow the Sun< Cloud State o& the art physical data center protection, (erations

logical data security and data privacy protection policies ;ro"active security engagement and monitoring

2! = 9

)irect lin+ et%een cloudper&ormance operations and development &or optimal and rapid remediation nied support at every layer o& the tech stac+ and across clouds

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

10

 

$. )ata Center Operations State o* the 0rt Cloud -isaster Reco>ery 6ack4( 0>ailability and S?0/s #ithin region 7A / ) %ith highly redundant and resilient in&rastructure in the event o& a disaster Comprehensive data ac+ up strategy %ith uilt in redundancy and &ault tolerance  *arget  * arget System Availaility Availaility evel o& .!K Oracle engineered systems po%ered speed, per&ormance and scalaility %ithout the up&ront investment

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

11

 

4. Customer Security Luote “ (Mm actually +ind o& surprised that security is a bigger issue on the ERP side with the controllers and the CFOs. (Mm CFOs.  (Mm going to put my trust in something li+e an Oracle data center that has signicant amounts o& security, as opposed to, say, t%o or three (* guys that ( have do%nstairs that are responsile &or ultimately managing and maintaining %ho has access to that data. In a scenario where we outsource this to Oracle, it makes a lot of sense for us to be able to say say,, heres somebody whos a lot better at this than we are, and I think the risks are actually signi!cantly smaller smaller..

N Drandon Dyrne, ; o& nance, CS:

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

12

 

!. Cloud Security esources •

•

C(O (nsights ideo ;art 1' Cloud Security Challenges C(O (nsights ideo' ;art 2 " )ierent Clouds :Pual )ierent  is+

•

•

•

C(O (nsights ideo ' ;art $ " 7o% to 8itigate is+ in the Cloud  Cloud   :6ecutive Drie&' ! things to loo+ &or in cloud provider %hen i t comes to security Cloud Operations Sales :nalement ;ortal  ;ortal  

•

SaaS Sales Content

•

Security in the Cloud

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

1$

 

:; Cloud ! in 1! Series •

Ie6t ! in 1!' Septemer 1, 2014Q topic is *D)

 Roin the :; Cloud 8ar+et (ntelligence OSI (ntelligence OSI

•

•

Conversation eplays o& past ! in 1! sessions  –

 –

0ll re(lays %ill e availale on Oracle Sales Academy •

Search &or the @:; Cloud ! in 1! Huided earning ;lan <H;=

•

Once added, you %ill e notied as ne% replays are availale

eplay %ill also e availale on the :; Cloud 8ar+et (ntelligence  (ntelligence  OSI conversation

Copyright © 2014 Oracle and/or its afliates. All rights reserved.

Copyright © 2014 Oracle and/or its afliates. All rights reserved.  

uestions@ #A to 4n"ute ?ine or Via 7ebE+ Chat

Contact (n&o'

 aldah 7a+im' yaldah.ha+imToracle.com  aldah o Condon' ro.condonToracle.com

Copyright © 2014 Oracle and/or its afliates. All rights reserved.