HIGHCIS 5.2

Ensure database backups are encrypted

Database backups should be encrypted with customer-managed keys.

Security Impact

Unencrypted backups may expose sensitive data if storage is compromised.

How to Remediate

Configure database to use Vault master key for backup encryption.

Affected Resources

OCI::Database::DbSystemOCI::Database::Backup

Compliance Frameworks

CIS OCI v1.2.0SOC 2PCI-DSSHIPAA

How TigerGate Helps

TigerGate continuously monitors your Oracle Cloud environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all Oracle Cloud Database resources across your Oracle Cloud tenancies every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for CIS OCI v1.2.0, SOC 2, PCI-DSS compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
oracle-database-2
Service
Oracle Cloud Database
Category
Encryption
Severity
HIGH
CIS Benchmark
5.2

Automate This Check

TigerGate automatically scans your Oracle Cloud environment for this and 50+ other security checks.

Start Free Trial

Related Oracle Cloud Database Checks

View all checks
oracle-database-1high

Ensure Autonomous Database uses private endpoints

oracle-database-3medium

Ensure Autonomous Database has Data Guard enabled

oracle-database-4high

Ensure database audit logging is enabled

oracle-database-5high

Ensure TDE is enabled for database encryption

oracle-database-6high

Ensure database connections use TLS