OCI-019 Oracle Cloud Infrastructure (OCI)

Database systems use encryption / TDE.

Database systems use encryption / TDE.

Domain
Oracle Cloud Infrastructure (OCI)
Area
Database
Automated / manual
Automated

Risk if it fails

Unencrypted DB files expose all records.

The database holds the crown jewels. Without encryption, a stolen backup or disk image gives the attacker every record in readable form.

How Tess tests it

1 test — each concludes only on cited evidence.

Database systems use encryption / TDE.

Automated
Procedure
Confirm DB system/Autonomous DB encryption configuration.

Read-only command 

oci db database list --compartment-id <compartment-ocid> --db-system-id <ocid> --query 'data[].{name:"db-name"}'

More in Oracle Cloud Infrastructure (OCI)

OCI-001 MFA is enforced for all IAM users, especially administrators. OCI-002 Customer secret keys / API keys are rotated regularly (<=90 days). OCI-003 A strong password policy is configured. OCI-004 Membership of the Administrators group is minimal.

Want Tess to test OCI-019 against your evidence?

Book a demo