Information assets differentiate many companies today. In order to properly protect this information from external and internal attacks, as well as misuse, organizations must implement security controls as close to the data as possible. By protecting the data at the database layer, organizations can control and manage critical information assets centrally. However, to properly protect the information at the database layer there are a number of comprehensive measures need to be taken. With this paper Tanya Baccum, SANS Institute analyst, examines these measures for holistically protecting Oracle database from the inside out.