Microsoft® SQL Server 2012 Unleashed

Summary

As stated earlier, best practices for security and compliance must start from the glass and reach through the application, to the database layer, and even to the operating system and the physical file levels. This chapter describes an orderly process to follow as you develop applications that include security and compliance reviews and add testing all along the way. You should never wait until your application is done to start checking for security vulnerabilities; verify adherence to compliance rules or regulations; or determine what data needs to be protected, encrypted, or perhaps not even stored.

Taking advantage of the new SQL Server Auditing feature can be extremely useful in identifying and monitoring compliance of access and ...