Microsoft® SQL Server 2008 R2 Unleashed

Across the Life Cycle

We introduce formal development life-cycle concepts in other chapters. In those chapters, such as Chapter 41, “A Performance and Tuning Methodology,” the emphasis is on designing in performance from the beginning. A part of good design is how you have complied with laws and regulations, how you have protected the data you access or store, how you have secured your application and data, and how you have verified all this. For these reasons, we provide some details and describe what must be done across the development life cycle to properly address security and compliance. We term this process the “risk mitigation” of what you build.

Figure 13.2 shows a formal waterfall development life cycle with key security and compliance ...