Problem

Most security efforts are focused ont he application, the operating system or the network. The database is always the last to be secured yet it holds all the key information. Data confidentiality, integrity and availability is important and required a specialist in database security to truly understand the rrisks associated with a data breach.

Solution

Our Databse Security service offers a documented, comprehensive and in-depth analysis of the current security posture of existing relational databases. We perform manual and atsumated testing of database security on the database implemenation, the application accessing the database and the network architecture.  The security assessment delivers a comprehensive and in-depth analysis of the current security controls of the database. We provide technical recommendations that can be addressed byt the administrators and provides strategic solutions that can be addressed by Security Managers, Auditors, Compliance Officers and senior management.  Key steps in a Databse assessment include:

Create an inventory of all database systems and use classifications
Classify data risk, monitoring capabilities and risk rating on data access
Review roles and access restrictions
Review authorizations for users, permission levels, and user management processes
Review application access, authentication, application audit and control 
Audit activity, change control processes. log review

Review network controls and detection systems 
Review reporting capabilities