White Papers for International Standards Organization (ISO) 27002 (17799)

Database Security Assessment: The first step toward complete database security and regulatory compliance

Imperva

As the primary repository for the enterprise's most valuable information, the database is perhaps the most sensitive segment of the IT landscape. Many organizations are learning that database assets are vulnerable to both external attackers via Web applications and internal employees who take advantage of more direct privileges. Customer records, financial reports, and patient data are all at risk. In addition, compliance with regulatory requirements such as Sarbanes-Oxley (SOX), the Payment Card Industry Data Security Standard (PCI DSS), and others require organizations to perform database security assessments.
The purpose of this paper is to help organizations take the first step toward securing their databases through best practice security assessment. This paper outlines the elements of a best practice database security assessment process and where it fits within a complete database security lifecycle. It also includes brief introductions to Imperva's solutions in this area: the Scuba by Imperva Database Assessment Scanner and the SecureSphere Database Security and Monitoring Gateways.

View the White Paper

Share or bookmarklet this web page at: