Question: What database security countermeasures can I apply to a SQL Server environment against potential hacker attacks? There is plenty of sensitive data in our systems such as personal details and financial information.

Answer:  A well co-ordinated and regularly audited security checks is the best way forward. The tactics will depend on the amount of resources available and the level of security escalation required'.Here are some ideas:

1)       Have you locked down all the systems on the network. ? Is there a well defined segregation of duties policy set up – where all authorised individuals have access? Prioritise production systems then work your way down.

Keep in mind , it’s not unusual to have production data on test or development systems.

2)       Invest in a database vulnerability assessment tool. Focus on : security patches, strong passwords,security enabled, and proper access controls

3)       Monitoring of access attempts. Do you audit failed login attempts? Do you have a daily Login failed report?

4)       Do you have a SQL Server Security policy in place?

5)       For advanced countermeasures , do you have a Database access monitoring system in place. A Database Access monitoring system will monitor the databases , and move the data onto a separate server  therefore minimising the possibility of an a hacker deleting the activity.

 Read More

SQL Server – Maintaining different environments - SQL Server DBA