Implementing logging in applications accessing confidential data

 Hello all

We have a number of datawarehouse applications based on confidential data, both data about persons and data about businesses. Our applications are developed inhouse using sql and most often plsql. Now we are facing scrutiny from the national data security agency. They want us to log every access to confidential data, including batch accesses. The logging should store information about every individual piece of data touched, which more or less translates to Fine Grained Auditing. We see a lot of problems with this, both in terms of performance and in terms of need for data storage for the logging-data.