Database Security Risk Assessment (How to Perform Security Assessment of Enterprise Database - Oracle & Microsoft SQL Server) [$20.00]

Terms and Conditions

The database is an integral part of every organization’s information system and IT infrastructure. As a matter of fact, it is one of the major components of every application solution. Given its critical function of storing and retaining organizational data and business information, the security of the database cannot be overemphasized. To ensure security of business information and confidential customer data, an end-to-end approach to application security is essential and same include security of the database. Where adequate controls are not put in place at the database level, organizational data and business information could be exposed to the risk of confidentiality, integrity and availability (CIA). Thus, it is important that investment is made in database security implementations, administration and monitoring.

To ensure that good security practices are put in place for the security of enterprise database systems, Information Risk Assurance and Cybersecurity practitioners who are saddle with the responsibility of database security should understand their roles in the process toward ensuring that the best security practices for enterprise database systems are adopted and enforced. While there are different database management systems/software in the marketplace to choose from, it is important that decisions on which database technology to use is made on the basis of business and security requirements of the organization. In doing this, the organization must adopt a security baseline for its database systems pivoted on its security requirements and operational standards.

Thus, it behooves on the information security and IT risk assurance functions to provide assurance on the security of the database system. However, this cannot be achieved without granular understanding of the configurable security parameters of the database management system technologies in the marketplace.

This book is a do-it-yourself security assessment guide for the widely used database management system, e.g. Oracle and Microsoft SQL Server database systems. It provides a details explanation of all configurable security parameters in the mentioned database systems, their security implications and how they could be exploited to perform malicious attacks on the database when activated. This book will help Information Risk Assurance and Cybersecurity practitioners as well as Database Administrators to perform security assessment review of their database infrastructure and to adopt the best security baseline that is most suitable for their organization. It provides a practical approach to reviewing database systems and outline test procedures to be performed that will validate the security or otherwise of the database.

It serves as a security risk assessment program/checklist for IT Assurance practitioners (e.g. IT Risk Analyst/Manager, Cyber/Information Security Analysts, Information Systems Auditors and Systems Control Analysts, CISO, etc.) and enable them understand as well as identify some security configurations that are built to the database infrastructure some of which are installed by default when setting up the database except exclusively turned off. Risk assessment program/checklist can easily be integrated with popular audit management software such as teammatessolutions or MKinsight field audit.

Intended for organizations desirous of build a security baseline for their enterprise database management systems from the ground up or strengthen an existing one. Below is a sample page of the database security risk assessment checklist/program. For full access to the document, you can subscribe to our membership plan or purchase the book by click the Buy Now or Add to Cart button below.

Review the book sample pages and table of content below. Please note that a link to download the eBook in PDF format will be provided to you upon successful checkout. However, if you want the book in other reading formats such as .ePub, or .kobi, please Contact US and we will email you a copy of the book in the format of your choice on request.