You can view a database as a collection of physical files divided into groups. The groups are

Control File

The control file contains data file control information, audit control information, and dynamic database parameter values. The control file also provides database interlock control, which allows certain functions, such as recovery, to have exclusive use of the database.

Read access to the control file is required for users and programs that need to open the database.

Data Files

A data file contains data arranged in a particular format. An example of the contents of a data file might be an employee’s name, employee identification number, performance rating, and salary.

Some, all, or none of the information in a data file might be sensitive. You can limit both read and write access to data files. Using physical security mechanisms, you can limit access to all the information in a data file. Using logical security mechanisms, you can limit access to portions of the information in the data file.

Audit Files

An audit file contains data for database recovery purposes. Some of the data contained in the audit file might be sensitive, as this data consists of information from your data files.

Securing audit files ensures that access (for example, read and write access) is restricted to authorized personnel.