ODA Security

Hi Gurus,

I am a technofunctional in Oracle EBS. I am using EBS 12.1.3

I have no knowledge on DBA let alone operating system or ODA. That's why we are using 3rd party as our DBA (outsourced).

We refreshed our hardware last Oct 2013, where we chose to use ODA.

Right now, our IT department wants to restructure the company security (including secure access & networking).

My questions are:

1. What is the best practice to do security in ODA, especially when we are using 3rd party as our DBA?

    Our outsource DBA says that he will need to use Root Access to do maintenance on ODA (apply patch, troubleshooting, etc) whereas based on our IT department we should not use root password to do anything / modify the system