Evaluating controls in database environments

Course welcome and introductions

PwC

Session Objectives
At the end of this course participants will be able to:

Perform a basic database review

Understand and use the firms database tools and methodologies

Speak intelligently with audit team and clients about databases and their
risks

Evaluating controls in database environments

Slide 2

Agenda for this course

Introduction and Session Outline

Database theory and background
Scoping database environment
SQL language basics
For Oracle 10g and SQL Server 2005:
- Auditing Logging and Monitoring
- User Management
- Password Management
- File System and Access Management
- Sensitive System Privileges and Utilities
- Fault Tolerance, Backup and Recovery
- System Configuration
DB2 Overview
Conclusion
Evaluating controls in database environments

Slide 3

Tools and Methodology

For Oracle 10g and SQL Server 2005:

Practice Aids
Work Programs
Reports Auditing Utility
Scripts

Evaluating controls in database environments

Slide 4

Administrative arrangements

Agenda for the course

60 minutes for lunch

15 minutes per break

Classroom etiquette
Sign-in sheet
Please actively participate and ask questions!

Evaluating controls in database environments

Slide 5

Presenters and Attendees

Presenters
Who are we?
What are our backgrounds?

Participant
Who are you (name/staff class/office)?
What is your experience with or knowledge of databases?
What are your specific expectations of this course?
Something personal or unique?

Evaluating controls in database environments

Slide 6