Configuring systems to a standard and maintaining those standards is a key aspect for meeting audit & compliance requirements. While the Windows operating system now has tools like Desired State Configuration through PowerShell and has had Group Policy Objects (GPOs) since Windows 2000, SQL Server is a little harder to maintain. While there are tools available, these tools often aren't as well known or as heavily used as their counterparts for the OS.

In this presentation we'll look at what tools are available out of the box for your SQL Server farm, where you will likely need to augment checks and corrective actions using scripts, and how to plan a custom reporting architecture to be able to show an auditor you're performing these actions regularly.

Speaker: K. Brian Kelley is a SQL Server author, columnist, and Microsoft MVP focusing primarily on SQL Server and Windows security. In addition to being a database administrator, he has served as an infrastructure and security architect encompassing solutions with Citrix, virtualization, and Active Directory. Brian is also a Certified Information Systems Auditor (CISA) and has been the head of a financial organization’s computer incident response team. Brian is active in the IT community having spoken at DevConnections, SQL Saturdays, code camps, and user groups. He is also the President of the Midlands PASS Chapter, a Professional Association for SQL Server Chapter located in Columbia, SC.

Topics: Database Compliance, Database Security
Products: SQL Compliance Manager