Database Security Assessment

[sfmailsbm () gmail com]

Dear List,
We are in the process of designing a process to audit Database security (parameter setup, audit logs, etc)

Just wanted to know what tools/scripts are available to go about performing such an audit by just scanning the DB 
(commercial & open source)

Googled on the subject, but would like to get some feedback from people who have already gone through this phase

many thanks to all

Ronish