• Also, Security Measures are based on trust model. If we can’t rely on Administrators (which we shouldn’t) of your application / database then we can’t rely on anyone.

    I am aware of incidences where Admin were guilty for security breaches. But should we distrust all?

    I remember a recent post in SSC where OP asked to encrypt the data from DBAs for HR modules. Funny though, it’s a valid requirement.