期刊刊名：全球商業經營管理學報 　 卷期：7期

篇名出版日期：2015年9月1日

作者：Wei-Ming Ma, James Lee

語言：English

關鍵字：Personal Data Protection Act, Database Activity Monitoring, Information Security Policies, Regulatory compliance,個人資料保護法,資料庫活動監控,資訊安全政策,符合法規

被點閱次數：1次

閱讀時間：2sec

摘要：
In recent years, more and more personal information to be used as a fraud syndicate tools. In order to ensure that personal information will not be leaked by enterprises, "Personal Data Protection Act" was promulgated and implemented by Taiwan, ROC, and its purpose is to allow companies to fulfill the obligation to protect customer data, and then achieve the goal "of compliance exemption". This study is response to data audit mechanism, and combined with existing enterprise management mechanisms, personal risk assessment and implement a data-owned law advocacy and information security education and training, making the business in line with the law and regulations. Database Activity Monitoring (DAM) tools have been implemented to capture the records from user and server connections of Application server and then compared that to user and the server side database SQL execution record. From the records, the company can determine which violates the information security policy to executive warning or blocking invasions and track events. It can be instantly and continuously monitor and analyze database activity, for violating the policy database activity can send alerts immediately. All the tracks can be recorded for later analysis, identification of end-users and accountability, and can solve enterprise database security audit and other issues. This study also confirms DAM can be reached the goal all the time to protect enterprise’s data forming a layer of safety nets to protect critical assets owned by the company.

　　　　　[全文下載]