The Database Security Checklist
Database security can jeopardize your network security. The
security administration of your RDBMS (Relational Database Management System),
needs to be focused on preventing the unauthorized use of your company or
business information by criminals.
It is true that managing database security is not easy, if you don't have the
right tools to administer permissions and authorizations. It's critical to have
an updated Database Security Checklist (DSC) and a Database Security Tracking
Sheet (DSTS) . These are key tools to successfully manage database integrity.
The information in this article has been specifically designed so that you can
use the Database Security Checklist (DSC) with any RDBMSs product including SQL
Server, Oracle 8i and Sybase Adaptive Server . In the next article we will
present the Database Security Tracking Sheet.
Tools to Manage Database Security: The Database Security Checklist (DSC)
Security attacks typically utilize weaknesses in database programs and tools
used by third party systems such as web servers. There are many tools to secure
RDBMS and its data. The DSC will guide you to ensure that you've protected the
aspects necessary to secure your information stored in the RDBMS. The DSC has to
be of your overall security plan.
Figure 1. This is the Database Security Checklist. Print this
page and use it to evaluate your situation.
Databases are the most valuable information assets that your business has. The
Database Security Checklist (DSC) will help you manage the database security
implementation. As mentioned at the beginning of this article, there are
hundreds of security tools to manage your RDBMS security. Some tools may be as
simple as a checklist. The most important thing is to remember to use them.
By Leonard Loro
About the Author:
Leonard Loro, MCSE, MCSD, ISS, MCT, CCNA, is a recognized e-Business specialist.
His experience includes engaging, managing and implementing large consulting
projects for government agencies and companies like Microsoft, Nissan as well as
other Fortune 500's. Leonard can be reached at Leonardo.loro@enresource.com.
| 
| 
| 
| 
| 
| 
| 
| 
| 
| 
| 