SQL Clone
SQLServerCentral is supported by Redgate
 
Log in  ::  Register  ::  Not logged in
 
 
 


Do you have a security to-do list?


Do you have a security to-do list?

Author
Message
Steve Jones
Steve Jones
SSC Guru
SSC Guru (628K reputation)SSC Guru (628K reputation)SSC Guru (628K reputation)SSC Guru (628K reputation)SSC Guru (628K reputation)SSC Guru (628K reputation)SSC Guru (628K reputation)SSC Guru (628K reputation)

Group: Administrators
Points: 628509 Visits: 21336
Comments posted to this topic are about the item Do you have a security to-do list?

Follow me on Twitter: @way0utwest
Forum Etiquette: How to post data/code on a forum to get the best help
My Blog: www.voiceofthedba.com
IowaDave
IowaDave
Ten Centuries
Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)Ten Centuries (1.4K reputation)

Group: General Forum Members
Points: 1421 Visits: 656
I think this is a great reminder. So often we get complacent and think "we're fine". We see all the data breach stories and we think "What were they thinking? How could they have been so dumb?", but we really should instead take a fresh look at our situation just as Steve is imploring us to do.

Maybe our personal security practices are rock star, but what about everyone else's? Have we given proper training to others who connect to our databases? We may lock our machines every time we get up from our desks, but do we have developers working from a coffee shop who connect to production and then get up and go get a coffee leaving it unlocked? Do we have any monitoring alerts on that would let us know if hundreds of rows were accessed/deleted by someone who normally doesn't do that?

Take 15 minutes today and write down "crazy scenarios" and then brainstorm ways you could "address" them.
Go


Permissions

You can't post new topics.
You can't post topic replies.
You can't post new polls.
You can't post replies to polls.
You can't edit your own topics.
You can't delete your own topics.
You can't edit other topics.
You can't delete other topics.
You can't edit your own posts.
You can't edit other posts.
You can't delete your own posts.
You can't delete other posts.
You can't post events.
You can't edit your own events.
You can't edit other events.
You can't delete your own events.
You can't delete other events.
You can't send private messages.
You can't send emails.
You can read topics.
You can't vote in polls.
You can't upload attachments.
You can download attachments.
You can't post HTML code.
You can't edit HTML code.
You can't post IFCode.
You can't post JavaScript.
You can post emoticons.
You can't post or upload images.

Select a forum









































































































































































SQLServerCentral


Search