An information system, an organized set of procedures by which data, information and information relevant to an organization, institution, society or state are collected, processed, stored, searched and displayed. Information systems audit is a process of checking the performance of information systems, considering what the business expects from them, or considering the opportunities that their application in business provides. CobiT is an umbrella standard for corporate IT governance that defines areas, processes and individual controls for corporate and operational IT management. ITIL provides the so-called top-down, that is, a business-oriented approach to IT management that places particular emphasis on the strategic business value of IT and the need to deliver its high quality service (IT service, IT service). Information systems auditing is currently receiving the most attention in the financial sector. It must be acknowledged that the Croatian National Bank gives a strong pace to the development of the audit methodology, especially regarding the external audit of the credit institutions' information system. Information systems auditing is a complex process consisting of a series of steps and stages that ultimately test the effectiveness of IT controls to gather evidence and arguments for assessing business risk (the risk that a business is exposed to due to the fact that an information system and technological support is used in the implementation of business processes) and expert assessment of the maturity of the control environment. CEZIH is the Central Health Information System of the Republic of Croatia, which connects a number of health care applications and systems in the Republic of Croatia. The Ministry of Health of the Republic of Croatia is the owner and the Croatian Institute for Health Insurance is the operator of the central part of the CEZIH integral information system. Access to Oracle BP (Database) Security Audit is displayed for Oracle RSUBP. Oracle has been intensively trying to help its users make the database as secure as possible since Database 9i. In the current versions of Database 1.1 and 11.2, they have made an even greater improvement.