Data protection

Oracle Analytics Cloud (OAC) is publicly accessible

Platform(s)
  • Oracle Cloud Infrastructure

Compliance Frameworks
  • CPRA
  • ,
  • iso_27001_2022
  • ,
  • iso_27002_2022
  • ,
  • Mitre ATT&CK
  • ,
  • mpa
  • ,
  • NIST 800-53
  • ,
  • OCI CIS

Description

Oracle Analytics Cloud (OAC) is a scalable and secure public cloud service that provides a full set of capabilities to explore and perform collaborative analytics for you, your workgroup, and your enterprise. OAC instances provide ingress filtering of network traffic or can be deployed with in an existing Virtual Cloud Network (VCN). It was detected that OAC instance {OciAnalyticsInstance.Name} has an unrestricted access control rule. It is advised that all new OAC instances be deployed within a VCN and that the Access Control Rules are restricted to your corporate IP Addresses or VCNs for existing OAC instances. Restricting connectivity to Oracle Analytics Cloud instances reduces an OAC instance's exposure to risk.