Oracle Magazine, July/August 2018

Q Why is it critical to have the level of security that Onapsis provides to secure Oracle E Business Suite A The Onapsis context aware solutions deliver vulnerability and compliance controls to reduce risks affecting critical business processes and data Through open interfaces the platform can be integrated with leading security information and event management and GRC and network security products seamlessly incorporating enterprise applications into existing vulnerability risk and incident response management programs Q What is the importance of patch management and continuous monitoring for Oracle E Business Suite A We often see organizations without the time windows or resources to install patches promptly Its important to invest in proper patch management and to implement governance and controls around that If an organization cant apply a patch right away they need to monitor their Oracle EBS systems They need to make sure they have visibility into whats happening whos accessing what and whos doing what on the system If there is a threat actor exploiting vulnerabilities they need to deal with it immediately Unfortunately organizations are falling behind in monitoring activity in their systems Q Why include security when moving Oracle E Business Suite to the cloud A Moving to the cloud is an opportunity for organizations to make a fresh start It can help them avoid living with a backlog of security issues and continuously trying to catch up Weve calculated that it is five times less costly to implement security during digital transformation projects and or cloud migrations than afterwards Thats because of change management processes resources and the operational burden it takes to maintain and implement security after a new system is operational Onapsis works with customers to set up security during a cloud migration to provide the most cost effective and secure environment While adopting security for cloud used to be considered a roadblock the market has evolved and it is now viewed as an enabler Q What role does the Onapsis Research Labs play in providing security for critical applications such as Oracle E Business Suite A The Onapsis Research Labs continuously provides leading intelligence on security threats affecting Oracle enterprise applications Our research team is a key component of the security capabilities we provide to our customers The team is made up of security experts who provide the context and understanding of the Oraclespecific security threats The results of their research is incorporated into our products to make the products more robust Every time a new threat is discovered we integrate that knowledge into our platform Q How are Onapsis and Oracle working together to deliver enterprise security for Oracle customers going forward A The Onapsis approach involves understanding the business processes risks and concepts as well as the supporting technology Good security is built on years of experience and study of business applications and it takes time to understand the best approach Weve been working closely with Oracle for years reporting vulnerabilities in a number of Oracle products After building trust through responsible disclosure and joint work we have maintained a relationship that is beneficial for Oracle for Onapsis and most importantly for our shared customers trust through responsible disclosure and SPONSORED CONTENT