Hindustan Petroleum Corporation Limited Relies on Oracle Database Security Solutions

By ORACLE
Thursday, June 24, 2010

Protects Trade Secrets and Competitive Bid Information from Unauthorized Access

India, New Delhi - April 30, 2010

News Facts

In an effort to strengthen security and prevent leakage of competing bid information, Hindustan Petroleum Corporation Limited (www.hindustanpetroleum.com/En/UI/Home.aspx) (HPCL), one of India's largest PSU’s, a Global Fortune 500 company, has secured its Crude Oil Import Tender application with Oracle Audit Vault (www.oracle.com/database/audit-vault.html) and Oracle Database Vault (www.oracle.com/database/database-vault.html) solutions.
HPCL refineries crude throughput is 15.81 million metric tonnes (1). Therefore, procuring the right quality of crude oil at the optimum time and price through the e-tendering application plays a very critical role in HPCL’s overall profit. During HPCL’s crude oil import tendering, all bid information is submitted online/ via the web and stored in an Oracle Database.
To address this, HPCL has implemented Oracle Audit Vault and Oracle Database Vault to be able to safeguard volumes of classified information of competing bid data. This could include information on material quality, quantity, loading port, pricing period among others, which are all submitted, online by over 60 international vendors.
Oracle Database Vault allows HPCL to prevent confidential bid data from unauthorized access by any user – even privileged users such as Database Administrators.
In addition, Oracle Audit Vault enables HPCL’s to audit all database activity and reduce the cost of IT security costs by automating the collection and consolidation of audit data from all database servers.
These Oracle solutions help HPCL ensure confidential data is not leaked during the bidding process that is critical to the HPCL’s profitability.

Oracle Database Security Solutions

Oracle Database Vault helps organizations address data governance requirements and increase the security of existing applications.
With Oracle Database Vault, organizations can pro-actively safeguard application data stored in the Oracle database from being accessed by privileged database users.
Application data can be further protected using Oracle Database Vault's multi-factor policies that control access based on built-in factors such as time of day, IP address, application name, and authentication method, preventing unauthorized ad-hoc access and application by-pass.
Oracle Audit Vault reduces the cost and complexity of security by automating the collection and consolidation of audit data. It provides a secure and highly scalable audit warehouse, enabling simplified audit reporting, analysis, and threat detection.
In addition, database audit settings are centrally managed and monitored from within Audit Vault, reducing IT security cost. With Oracle Audit Vault, organizations are in a much better position to enforce privacy policies, guard against insider threats, and address regulatory requirements
Oracle Database Vault and Oracle Audit Vault are part of Oracle’s comprehensive portfolio of database security solutions, which include powerful privileged user and multi-factor access control, data classification, transparent data encryption, auditing, monitoring, and data masking.
With Oracle Database Security solutions customers can deploy reliable data security solutions that do not require any changes to existing applications, saving time and money.

Supporting Quotes

“The e-tendering application is a very vital and integral part of HPCL’s crude oil business. Being an online process, we had to ensure that no information leaks out before the bid is closed,” said Nishi Vasudeva, Executive Director – Information Systems, HPCL. “We decided to implement Oracle Audit Vault and Database Vault because they extend the power of Oracle Database security to meet specific requirements in security and compliance.”
“We are delighted to be able to support –HPCL in securing their e-tendering process with solutions that protect their mission critical data,” said Sandeep Mathur, Vice President, Technology Sales, Oracle India. “At a time when companies are facing increasingly sophisticated threats from both external attacks and insiders, Oracle Database Security solutions allow organizations to deploy controls needed to protect their data and their business.”

Supporting Resources

Oracle Database Vault (www.oracle.com/database/database-vault.html)
Oracle Audit Vault (www.oracle.com/database/audit-vault.html)
Oracle Database 11g (www.oracle.com/database)
Period: 2008 – 2009 (1)

About HPCL

Established in 1974, Hindustan Petroleum Corporation Limited (HPCL) is a mega integrated oil refining & marketing company in India HPCL operates 2 major refineries producing a wide variety of petroleum fuels & specialties, one at Mumbai (West Coast) of 6.5 million metric tonnes per annum (MMTPA) capacity and the other in Vishakhapatnam (East Coast) of 7.5 MMTPA capacity. HPCL also holds an equity stake of 16.95% in Mangalore Refinery & Petrochemicals Limited (MRPL), a joint venture refinery, with a capacity of 9 MMTPA. In addition, HPCL is progressing towards setting up of a grass root Refinery in the state of Punjab, in collaboration with M/s Mittal Investments S.a.r.l.

The marketing network of HPCL consists of 13 Zonal offices in major cities and 92 Regional Offices facilitated by a Supply & Distribution infrastructure comprising Terminals, Pipelines, Aviation Service Facilities, LPG Bottling Plants, Lube filling plants, Inland Relay Depots, Retail Outlets (Petrol Pumps) and LPG & Lube Distributorships. HPCL has, over the years, moved from strength to strength on all fronts.

About Oracle

Oracle (NASDAQ: ORCL) is the world's most complete, open, and integrated business software and hardware systems company. For more information about Oracle, visit oracle.com (www.oracle.com/) .

Trademarks

Oracle and Java are registered trademarks of Oracle and/or its affiliates. Other names may be trademarks of their respective owners.

Contact Info

Jeanette Tan

Oracle Asia Pacific and Japan

+65.6436.1257

jeanette.tan@oracle.com

Vandana Shenoy

Oracle India

+91.124.4328156

vandana.shenoy@oracle.com