Study of Implementation of Enterprise Database Activity Monitoring Based on Agile Project Management
Wei-Ming Ma, James Rafferty Lee · 2015
In recent years, more and more personal information to be used as a fraud syndicate tools. In order to ensure that personal information will not be leaked by enterprises, ＂Personal Data Protection Act＂ was promulgated and implemented by Taiwan, ROC, and its purpose is to allow companies to fulfill the obligation to protect customer data, and then achieve the goal ＂of compliance exemption＂. This study is response to data audit mechanism, and combined with existing enterprise management mechanisms, personal risk assessment and implement a data-owned law advocacy and information security education and training, making the business in line with the law and regulations. Database Activity Monitoring (DAM) tools have been implemented to capture the records from user and server connections of Application server and then compared that to user and the server side database SQL execution record. From the records, the company can determine which violates the information security policy to executive warning or blocking invasions and track events. It can be instantly and continuously monitor and analyze database activity, for violating the policy database activity can send alerts immediately. All the tracks can be recorded for later analysis, identification of end-users and accountability, and can solve enterprise database security audit and other issues. This study also confirms DAM can be reached the goal all the time to protect enterprise's data forming a layer of safety nets to protect critical assets owned by the company.