By Troy Kitch-Oracle on Oct 17, 2014
I had an opportunity to sit down with Cathy Robinson, Database Administrator at Infinity Property and Casualty Corporation while at Oracle OpenWorld 2014. Infinity Insurance is a public insurance company that deals with high risk maturities, mostly auto insurance, and provide products through a network of approximately 12,500 independent agencies and brokers. Cathy told me how they use Oracle Advanced Security for encryption and Oracle Database Vault for database privilege user controls.
Cathy has an interesting background with the Department of Defense and joined Infinity with a great understanding of what is required to lock down data and secure an IT environment. As I interviewed Cathy, I learned that the main overall issues they face include:
- Protecting sensitive personally identifiable information ( i.e. payment card, social security numbers)
- Educating employees on the importance of securing this data
- Securing older applications where changing software code is prohibitive
So they have been able to implement Oracle Advanced Security to address these security requirements without having to make any application changes. Additionally, there has been "no performance degradation whatsoever."To further put in place a defense in depth database security strategy, Infinity is also implementing Oracle Database Vault for separation of duties and least privilege.
When I asked why they chose Oracle, Cathy responded with the following:
- One vendor instead of multiple point solution vendors
- Deep integration with Oracle Databases
- Oracle security expertise, which included a database security assessment