Database Security Auditing (How to Perform Security Audit of Your Database - Oracle & Microsoft SQL Server) [$20.00]

Terms & Conditions and Privacy Policy

This book is a do-it-yourself security assessment guide for the widely used database management systems such as Oracle and Microsoft SQL Server database systems. It provides detailed explanation of all configurable security parameters in the mentioned database management systems, their security implications, how they could be exploited to perform malicious attacks on the database when activated and measures to be put in place to mitigate security risk without compromising on database performance. This book will help Information Risk Assurance and Cybersecurity practitioners as well as Database Administrators to perform security assessment review of their database infrastructure and to adopt the best security baseline that is most suitable for their organization. It provides a practical approach to reviewing database systems and outline test procedures to be performed that will validate the security or otherwise of the database.

The database is an integral part of every organization’s information system and IT infrastructure. As a matter of fact, it is one of the major components of every application solution. Given its critical function of storing and retaining organizational data and business information, the need for security of the database cannot be overemphasized. To ensure security of business information and confidential customer data, an end-to-end approach to application security is essential and same include security of the database. Where adequate controls are not put in place at the database level, organizational data and business information stored in the database could be exposed to the loss of confidentiality, integrity and availability (CIA) risk. Thus, it is important that investment is made in database security, administration and monitoring.

To ensure that good security practices are put in place for the security of enterprise database systems, Information Risk Assurance and Cybersecurity practitioners who are saddle with the responsibility of database security should understand their role in the process toward ensuring that the best security practices for enterprise database systems are adopted and enforced. While there are different database management systems/software in the market to choose from, it is important that decisions on which database technology to use is made on the basis of business and security requirements of the organization. In doing this, the organization must adopt a security baseline for its database systems pivoted on its security requirements and operational standards.

Thus, it behooves on the information security and IT risk assurance functions to provide assurance on the security of the database system. However, this cannot be achieved without granular understanding of the configurable security parameters of the database management system technologies.

The eBook serves as a security audit program and risk assessment checklist for IT Assurance practitioners (e.g. IT Risk Analyst/Manager, Cyber/Information Security Analysts, Information Systems Auditors and Systems Control Analysts, CISO, etc.) and enable them understand as well as identify some security configurations that are built into the database infrastructure some of which are set default when the database is being configured except exclusively turned off. Audit program/checklist can easily be integrated with popular audit management software such as teammatessolutions or MKinsight field audit.

Intended for organizations desirous of build a security baseline for their enterprise database systems and infrastructures from the ground up or strengthen an existing one. Below is a sample page of the database security audit ebook. For full access to the document, you can subscribe to our membership plan or purchase the book by clicking" Add to Cart" button above.

Review the book sample pages and table of content below. Please note that a link to download the eBook in PDF format will be provided to you upon successful checkout. However, if you want the book in other reading formats such as .ePub, or .kobi, please Contact US and we will email you a copy of the book in the format of your choice on request.