X
Subscribe to email updates

Security Strategies

Core-to-Edge Security: The Oracle Cloud Infrastructure Edge Network

As more customer, partner and employee interactions happen over internet-connected, digital channels and the threat landscape becomes more complex and varied,...

As more customer, partner and employee interactions happen over internet-connected, digital channels and the threat landscape becomes more complex and varied, the imperative for security has compounded. That’s why Oracle Cloud Infrastructure takes a different approach to security, one that extends from the core infrastructure (including the database) to the user edge. Oracle Cloud Infrastructure's core-to-edge security strategy protects you and your organization from a...

Here's a Nifty Checklist to Secure a Cloud Application

When customers are migrating existing applications from on-premises data centers and from other cloud providers to Oracle Cloud Infrastructure, or even when...

When customers are migrating existing applications from on-premises data centers and from other cloud providers to Oracle Cloud Infrastructure, or even when they are building new cloud native applications on Oracle Cloud Infrastructure, I often get asked for advice on how they can best secure their applications in a cloud environment. First of all, it is critical that development teams and security teams work in tandem to secure applications as well as the cloud environment....

Mapping the Future of Security at Oracle Cloud Infrastructure

"Make it easy for people to do the right thing, and they tend to." Those words were first spoken to me by a very wise and talented Chief Information Officer...

"Make it easy for people to do the right thing, and they tend to." Those words were first spoken to me by a very wise and talented Chief Information Officer (CIO) who mentored me early in my career. The quote really stuck with me, and it came to define my overall approach to leading security teams at the companies I've worked at over the last 15 years. It's certainly on my mind as I move into the new role of Chief Security Officer (CSO) for Oracle Cloud Infrastructure....

Part 2 of 4 - Oracle IaaS and Seven Pillars of Trusted Enterprise Cloud Platform

This is the second part of our blog series where we do a deep dive into the Oracle Cloud Infrastructure security approach. As a recap, we design our security...

This is the second part of our blog series where we do a deep dive into the Oracle Cloud Infrastructure security approach. As a recap, we design our security architecture and build security solutions based on seven core pillars. And under each of these pillars, we focus on delivering solutions and capabilities to help ensure our customers can improve the security posture of their overall cloud infrastructure. In the first post, we discussed how we enable customers to achieve...

Part 1 of 4 - Oracle IaaS and Seven Pillars of Trusted Enterprise Cloud Platform

Oracle Cloud Infrastructure’s security approach is based on seven core pillars. Each pillar has multiple solutions designed to maximize the security and...

Oracle Cloud Infrastructure’s security approach is based on seven core pillars. Each pillar has multiple solutions designed to maximize the security and compliance of the platform. You can read more about Oracle Cloud Infrastructure's security approach here. The seven core pillars of trusted enterprise cloud platform are:  Customer Isolation Data Encryption Security Controls Visibility Secure Hybrid Cloud High Availability Verifiably Secure Infrastructure Oracle employs some...

Announcing Oracle Cloud Infrastructure Key Management

Customers of Oracle Cloud Infrastructure moved their workloads to the cloud knowing that their data would be protected by encryption keys that are securely...

Customers of Oracle Cloud Infrastructure moved their workloads to the cloud knowing that their data would be protected by encryption keys that are securely stored and controlled by Oracle. However, some customers, especially those operating in regulated industries, asked Oracle to help them verify their security governance, regulatory compliance, and homogeneous encryption of their data where it is stored. Effective immediately, Oracle Cloud Infrastructure Key Management is...

Oracle CASB Enables Security Monitoring for Oracle Cloud Infrastructure

At Oracle Cloud Infrastructure, customer security is of paramount importance. We understand that enterprises of all industries and sizes require comprehensive...

At Oracle Cloud Infrastructure, customer security is of paramount importance. We understand that enterprises of all industries and sizes require comprehensive visibility, security and compliance monitoring over their cloud resources. Oracle Cloud Infrastructure provides maximum visibility to customers regarding the actions taken on their cloud resources through the availability of various logs, including the Oracle Cloud Infrastructure Audit service which tracks all actions...

Windows Server FIPS Compliance

Do your systems require compliance with FIPS on security then Oracle Cloud Infrastructure provides the flexibility to meet a key area of compliance for your...

Do your systems require compliance with FIPS on security then Oracle Cloud Infrastructure provides the flexibility to meet a key area of compliance for your Windows Server workloads: FIPS (Federal Information Processing Standard) compliance. The ability to create a FIPS-compliant server is a critical milestone in moving to the cloud. This post discusses how to achieve a FIPS-compliant Windows Server, describing the core steps for Windows Server 2016 server and referring to...

Guidance for Setting Up a Cloud Security Operations Center (cSOC)

Establishing a security operations center (SOC) is one of the primary requirements for managing cybersecurity-related risks in the current information age. This...

Establishing a security operations center (SOC) is one of the primary requirements for managing cybersecurity-related risks in the current information age. This post provides general DIY guidance for building a SOC primarily for Oracle Cloud, including both platform-as-a-service and infrastructure-as-a-service offerings. This general guidance is also applicable to hybrid cloud environments. As more businesses are relying on interconnected technologies, like IoT sensors and...