Security and Compliance Solutions for SOX and COBIT

Microsoft SQL Server database security guidelines are defined by the following tools and organizations:

• Center for Internet Security (CIS)
• Microsoft Best Practices Analyzer (MSBPA)
• Database Security Technical Implementation Guide (STIG)

They all provide guidance for ensuring that access to your SQL Server is auditable, secure and consistent. These guidelines offer recommendations to comply with Federal regulations like Sarbanes-Oxley (SOX) and Control Objectives for Information and Related Technology (COBIT). These regulations mandate that IT define the right business disciplines and good practices for SQL Server access in order to prevent internal and external intrusions and for enhancing SQL Server confidentiality, data integrity and availability.

This paper discusses how to take those SOX and COBIT guidelines and define the right baselines, track database object/data changes and report those findings from your SQL Servers to auditors using Idera's security solutions.

• Identify and manage an audit trail
• Comply with SOX and COBIT requirements
• Minimize business risks