Assessment Templates

Assessment Templates define the set of security checks crafted and curated by Oracle that run when you perform a security assessment against an individual target or a target database group.

View Assessment Templates

On the Assessment templates page, you can view the list of available assessment templates, as well as create new assessment templates. You can filter the list of custom assessment templates by selecting a specific compartment or entering an assessment name. Predefined templates are the same across all compartments. To create a new assessment template, click the Create assessment template button.

In the Oracle predefined templates tab, you can view the collection of Oracle-supplied templates along with their descriptions. You can view the corresponding template checks by selecting the name of a template. In addition to template details, the page also shows the target databases and target database groups where the template has been applied.

The Custom templates tab provides the name, description, state, created time, and updated time of your created templates. To view more details about a template, click the name of the template. Within the Template details page, you can apply the template, add tags, add checks, delete checks, and filter checks by check, check category, or references.

Create An Assessment Template

Assessment Templates define the set of security checks crafted and curated by Oracle that run when you perform a security assessment against an individual target or a target database group.

By creating an assessment template, you choose which checks are included when generating a security assessment report.

  1. Under Security center, click Security assessment.
  2. Under Related resources, click Assessment templates. The Assessment templates page is displayed.
  3. Click Create assessment template. The Create a new template page is displayed.
  4. Enter a Name or leave the default name.
  5. From the Compartment drop-down list, select the compartment to which you want to save the template.
  6. (Optional) Enter a Description.
  7. From the Import checks drop-down list, select an assessment template to import the desired checks into the new template.

    Note:

    If you change the selected template in the drop-down after choosing individual checks, your previous selections will be cleared and reset to match the newly selected template
  8. Select the desired checks to import.
  9. Select Add more checks to add additional checks from a selected template.
    1. Select a Template from the drop-down list.
    2. Select the desired checks to import.
    3. (Optional) Click + Add filter.
      1. Select a Type from the drop-down list.
      2. Select an Operation from the drop-down list.
      3. Select a Value from the drop-down list.
    4. Click Add more to add the additional checks.
  10. (Optional) Click Show advanced options to tag the assessment.
    1. Select a Tag namespace from the drop-down list.
    2. Provide a Tag key and Tag value.
    3. Click Add tag to create an additional tag to organize and track resources in your tenancy.
  11. (Optional) To filter, do the following:
    1. Click + Add filter.
    2. Select a Type from the drop-down list.
    3. Select an Operation from the drop-down list.
    4. Select a Value from the drop-down list.
  12. Click Next.
  13. Review the template.
  14. Click Submit to create the new template.

The newly created template can be viewed under Custom templates within the Assessment templates page.

Apply An Assessment Template

Learn how to apply Oracle predefined templates or Custom Templates to Assessment Templates to target databases or target database groups.

After creating an assessment template, you can choose to apply it to a target database or target database group.

  1. Under Security center, click Security assessment.
  2. Under Related resources, click Assessment templates. The Assessment templates page is displayed.
  3. Choose a template you wish to apply. Click the name of either an Oracle predefined template or a Custom template. The Template details page is displayed.
  4. Click Apply template.
  5. Select either a Target database or Target database group.

    Note:

    If a template already exists for the chosen target database or target database group, then the existing assessment template will be removed before a new assessment template is applied.
  6. From the Compartment drop-down list, select the compartment to which the target database or target database group is in.
  7. Click Next.
  8. (Optional) Update the Name of the template.
  9. (Optional) Enter a Description.
  10. Update template baseline severity for target database.
    1. For each finding in the table, update the expected severity as needed. Choose between the following severity levels: high, medium, low, advisory, evaluate, deferred, and pass.
    2. (Optional) Click + Add filter.
      1. Select a Type from the drop-down list.
      2. Select an Operation from the drop-down list.
      3. Select a Value from the drop-down list.
      4. Click Apply to apply the filter.
      5. (Optional) Click + Another filter to continue adding additional filters.
  11. Click Next.
  12. Review the template.
  13. Click Submit to apply the template.