Term · 11. Information Security Properties
Database Activity Monitoring DAM
Definition
Database Activity Monitoring (DAM) — solutions for real-time monitoring and auditing of database queries (SQL, DDL/DML, privileged DBA access). Goals: insider threat detection, compliance reporting (PCI DSS, SOX, HIPAA), forensic investigation. Orthogonal to PAM (DBA accounts).
Related terms
-
Audit
Independent examination of identity controls, processes, and records to verify compliance with policy and regulatory req …
-
Audit Trail
Chronological record of identity events — authentication, authorization decisions, provisioning actions, configuration c …
-
Privileged Session Management (PSM)
PAM capability that records, monitors, and analyzes sessions involving privileged credentials — SSH sessions to servers, …
-
Security Information and Event Management (SIEM)
Security Information and Event Management (SIEM) — class of software solutions performing real-time collection, normaliz …
-
Certification (Cert)
Periodic review process where designated reviewers attest that access remains appropriate. Outputs: approve, revoke, mod …
-
Access Control (AC)
Mechanism that determines whether a principal is permitted to perform a specific action on a specific resource. Includes …