Recent experience in auditing Oracle and IBM DB2 databases

In recent audits of Oracle and DB2 databases, our Continental IT auditors have seen consistent issues with database monitoring. Vendor best practices call for regular monitoring of response time, throughput and resource utilization. Many companies are not meeting these objectives mainly due to a misunderstanding of these controls. We intend to write an article about our recent experiences that will cover best practices and guidance in implementing strong controls. Stay tuned.