Arup Nanda finally updated his Project Lockdown series of Oracle Security articles for 11gR2. Definitely worth a read (and I’m surprised I can’t find an article on my blog about the first version of Project Lockdown – must’ve happened during a low-impact-blogging phase).