Disable install and demo accounts:

1. Disallow default user/password
2. PUBLIC has execute System privilege
3. PUBLIC has execute Object privilege
4. PUBLIC has execute UTL_FILE privilege
5. PUBLIC has execute UTL_SMTP privilege
6. PUBLIC has execute UTL_HTTP privilege
7. PUBLIC has execute UTL_TCP privilege
8. PUBLIC has execute DBMS_RANDOM
9. Password complexity
10. Restrict number of failed login attempts
11. Authentication protocol fallback
12. Connect and Resource grants

www.bestitdocuments.com