Project #4.docx - 1 Project #4: Acquisition Risk Analysis...

1
Project #4: Acquisition Risk Analysis
Project #4: Acquisition Risk Analysis
Course Hero: ZSCANT
24 November 2019

2
Project #4: Acquisition Risk Analysis
Oracle Overview
Oracle Corporation (Oracle) was founded in 1977 by Larry Ellison, Bob Miner, and Ed
Oates. These four partners met while working on a secret database technology at the request of
the central intelligence agency. After completing the project successfully, a decision of taking the
database and knowledge into the private sector was discussed and agreed upon by all four
partners. The journey began, and the company was known by a few names until in 1982 a
decision was made to change the name of the company from Relational Software Inc. to Oracle.
In 1987 Oracle was already the largest database management company in the world with 4,500
end-users in 55 different countries.
Oracle headquarters are located in Redwood Shores California.
The company has been at this location ever since they outgrew their original headquarters in 1989.
Today
Oracle is a thriving e-Commerce powerhouse that is a top provider of software and information
technology solutions.
Oracles’ target consumer is corporations and businesses. They offer products and services
either through cloud or hardware in the areas of applications, platforms, and infrastructure. As
the company has grown and become increasingly successful competition has arisen. While
Oracle is in the business of cloud computing and enterprise software several competitors offer
similar products. Currently, the largest competitor is a company called Salesforce which offers a
widely used customer relationship management product as well as a cloud platform.
Additionally, companies such as HP, Dell, Microsoft, and others are all competing for the same
customers and market causing fierce competition. Oracle had a risk management strategy
conducted not long ago. Key areas of risk and vulnerability were outlined by utilizing the
National Institute of Standards and Technology (NIST) Cyber Security Framework (CSF). To
mitigate these risks three products were recommended to be reviewed, purchased, and

3
Project #4: Acquisition Risk Analysis
implemented. Oracle cannot afford to allow its network or data to be breached, exposed, or
compromised.
Role of Governance Frameworks & Standards
To mitigate risk ensuring that the recommended products to purchase meet the
established Oracle security requirements is paramount. Currently, the three products suggested
for purchase were determined from the data generated by the risk management strategy. The list
below outlines the suggested products as well as explains their unique benefits:
i. Qualys Vulnerability Management: This top-rated product is a subscription-based cloud
service that shows the latest threats and vulnerabilities to a network. (Qualys, n.d.)
Benefits include:
 Instant visibility to vulnerabilities and cyber threats.