{"id":15,"date":"2014-08-27T10:53:59","date_gmt":"2014-08-27T10:53:59","guid":{"rendered":"http:\/\/sqlity.dev.lbdesign.eu\/?page_id=15"},"modified":"2014-11-17T19:43:37","modified_gmt":"2014-11-18T00:43:37","slug":"security","status":"publish","type":"page","link":"https:\/\/sqlity.net\/en\/services\/security\/","title":{"rendered":"Security"},"content":{"rendered":"

SQL Server Database Security Audit<\/h2>\n

\nLet us ask you a simple question: Is your data secure?\n<\/p>\n

\nThe High Cost of an Unsecure System... Did You Know the Average Cost for EACH Compromised Customer Record is $188?<\/strong> (src: Ponemon<\/a>)\n<\/p>\n

\nDepending on your business, a data breach could cost you millions. If your business deals with protected health information (PHI), chances are you\u2019re subject to HIPAA regulations that require you to protect health records. Do you know what counts as PHI? PHI can be medical records of course, but for example also cell phone numbers and even license plates.\n<\/p>\n

\nIt\u2019s the law that this information is encrypted and protected. Plus, ensuring it is encrypted can protect you if the worse does happen. You can read more about why to encrypt your PHI here<\/a>.\n<\/p>\n

\nBut even if you are not working with PHI, there are other types of information that have to be protected by law. This includes payment information (PCI data) and, depending on your company, could include any form of personally identifiable information (PII).\n<\/p>\n

\nToo many companies ignore database security until it is too late.\n<\/p>\n

\nDoes this sound familiar? The IT department is rushing to implement functionality and fixing the problems to get the system running smoothly. They have good intentions to tighten security later, of course, but time gets away from them with the fast approaching deadline.\n<\/p>\n

\nBefore you know it, the new database installation goes live without any security best practices in place. No one means to leave security gaps... it just happens.\n<\/p>\n

\nYet, security is critical<\/strong>. Nothing can bring your business to a screeching halt faster than a hacked database.\n<\/p>\n

\nConsider a recent Whitehat Security Statistics Report<\/em> that found 86% of websites had a minimum of one serious security vulnerability. Where could your site\u2019s vulnerabilities lie?\n<\/p>\n

\nThere are primarily three types of hackers:\n<\/p>\n

    \n
  1. An inside job<\/strong> \u2013 disgruntled employee or ex-employee. I know, you don\u2019t want to think about it but it happens.<\/li>\n
  2. Random attack<\/strong> \u2013 more common than you think. There are automated programs on the web looking for vulnerabilities. When they find one, they may install a virus, malware or another insidious piece of software.
    \n
    \nDo you know one of the most common ways these guys infiltrate your data? It is SQL Injection. If you allow SQL Injection in your code, then you are vulnerable.<\/li>\n
  3. Targeted attack<\/strong> \u2013 this is the hardest form of attack to protect yourself from, but it is also the least common. While you might not be able to completely prevent a targeted breach, the harder you make it, the more likely \u201cthey\u201d will give up and select a different target.<\/li>\n<\/ol>\n

    Your Database is Your Business<\/h2>\n

    \nIt\u2019s where your customers\u2019 information resides. The database controls your orders, streamlines your reports and keeps your office humming along \u2026 but only when it\u2019s working properly.\n<\/p>\n

    \nIf your database goes down, you will lose a lot of money. You might not be able to make any money at all. A security breach might not be on top of your mind when thinking about system uptime. But often, intruders leave a mess behind, causing your data to be inaccessible until you clean it up. It also costs a lot more to fix it. Let\u2019s be proactive. Let\u2019s make sure that this does not happen to you.\n<\/p>\n

    \nSqlity.net offers a Security Audit<\/a> in which we will review your overall database security implementation and make recommendations in areas where security could be improved.\n<\/p>\n