HIGHCIS 5.4

Ensure TDE is enabled for database encryption

Transparent Data Encryption should be enabled for data at rest.

Security Impact

Without TDE, data files are readable if storage is accessed directly.

How to Remediate

Enable TDE with customer-managed keys stored in OCI Vault.

Affected Resources

OCI::Database::DbSystem

Compliance Frameworks

CIS OCI v1.2.0SOC 2PCI-DSSHIPAA

How TigerGate Helps

TigerGate continuously monitors your Oracle Cloud environment to detect and alert on this misconfiguration. Here's what our platform does for this specific check:

  • Continuous Scanning

    Automatically scans all Oracle Cloud Database resources across your Oracle Cloud tenancies every hour

  • Instant Alerts

    Get notified via Slack, email, or webhooks when this misconfiguration is detected

  • One-Click Remediation

    Fix this issue directly from the TigerGate dashboard with our guided remediation

  • Compliance Evidence

    Automatically collect audit evidence for CIS OCI v1.2.0, SOC 2, PCI-DSS compliance

  • Drift Detection

    Get alerted if this configuration drifts back to an insecure state after remediation

Check Details

Check ID
oracle-database-5
Service
Oracle Cloud Database
Category
Encryption
Severity
HIGH
CIS Benchmark
5.4

Automate This Check

TigerGate automatically scans your Oracle Cloud environment for this and 50+ other security checks.

Start Free Trial

Related Oracle Cloud Database Checks

View all checks
oracle-database-1high

Ensure Autonomous Database uses private endpoints

oracle-database-2high

Ensure database backups are encrypted

oracle-database-3medium

Ensure Autonomous Database has Data Guard enabled

oracle-database-4high

Ensure database audit logging is enabled

oracle-database-6high

Ensure database connections use TLS