Today, business is about data. Database systems and the elements they store are arguably the most valuable assets in any given enterprise. Not only are business executives and IT leaders responsible for doing what is right to protect the business’s best interest, they are obligated to comply with the seemingly endless list of industry and government-imposed regulations.

As we have seen for more than a decade, database-related security breaches cannot be taken lightly. One of the greatest threats to databases is insiders with ill intent. Computer networks have become so complex that it’s easy for database administrators and IT managers to overlook database security gaps that are easily exploited without anyone ever knowing about it. Security weaknesses that would’ve been considered obvious and relatively simple to fix not that long ago are now the Achilles heel of modern business.

These challenges have created an environment where not only can a lot go wrong but there is also so much to lose. This is especially true when you do not have the proper culture combined with the proper business and technical controls/tools to ensure database security and compliance are kept in check. All it takes is one oversight, misstep or bad choice by a malicious insider and you have got a database security breach on your hands that you and your business executives may not be prepared to take on.

This whitepaper describes what your business is up against, the database administrator’s role in compliance, understanding the database security threat, what you can do to minimize database risks, whether to comply or not comply, how to move forward, regulations impacting database security, and common SQL Server security questions.