On 12/21/2015 08:54 PM, Andrew Kerber wrote:
Yes it will be. Unfortunately your average auditor doesn't have the skill set to understand whether or not it really is a security problem.The auditors don't have skills to figure out real security problems, here we do fully agree, but they do have checklists, which make them a pain in the neck or lower and supplant their technical skills. My favorite recommendation by the auditors is not to use user SYS for backup but to create another user for that. Of course, before the advent of fairly badly messed up SYSBACKUP role in 12c, that meant creating another SYSDBA user. And having two different SYSDBA users, with two different passwords, is somehow more secure than having just one?
Sent from my iPad
