Database Activity Monitoring (DAM) has been the biggest advancement in database security in the last decade. Identity management controls access, and encryption protects data on media, but monitoring verifies usage. Because of the complexities involved, this is not something you want to try to write yourself. Unlike assessment and auditing, the database does not provide built-in mechanisms to for data collection, analysis, and policy enforcement.
Database Activity Monitoring (DAM) has been the biggest advancement in database security in the last decade. Identity management controls access, and encryption protects data on media, but monitoring verifies usage. Because of the complexities involved, this is not something you want to try to write yourself. Unlike assessment and auditing, the database does not provide built-in mechanisms to for data collection, analysis, and policy enforcement.
