Scribd Logo
Upload

Welcome to Scribd!

  • 848 views

    SQL Server Audit Checklist

    Uploaded by

    Neeloy Chowdhury
    How to survey sql server audit and its required checklist. It will help IT Auditor specially for SQL Server Audit to prepare themselves for the database audit.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as DOC, PDF, TXT or read online from Scribd

    SQL Server Audit Checklist

    Uploaded by

    Neeloy Chowdhury
    848 views1 page
    How to survey sql server audit and its required checklist. It will help IT Auditor specially for SQL Server Audit to prepare themselves for the database audit.

    Copyright

    © Attribution Non-Commercial (BY-NC)

    Available Formats

    DOC, PDF, TXT or read online from Scribd

    Did you find this document useful?

    Is this content inappropriate?

    How to survey sql server audit and its required checklist. It will help IT Auditor specially for SQL Server Audit to prepare themselves for the database audit.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as DOC, PDF, TXT or read online from Scribd
    Download as doc, pdf, or txt
    848 views1 page

    SQL Server Audit Checklist

    Uploaded by

    Neeloy Chowdhury
    How to survey sql server audit and its required checklist. It will help IT Auditor specially for SQL Server Audit to prepare themselves for the database audit.

    Copyright:

    Attribution Non-Commercial (BY-NC)
    Download as DOC, PDF, TXT or read online from Scribd
    Download as doc, pdf, or txt
    of 1

    Microsoft SQL Server - Audit Checklist

    1. Review Windows NT / 2000 host identification and authentication mechanisms, Trust Relationships Account Policies User and Group Accounts 2. Consider Windows NT /2000 resource access control to protect the SQL Server programs, and databases Network Shares Directory and File Permissions 3. Review use of operating system audit trail mechanisms, including Audit Policy 4. Identify Microsoft SQL Server products and versions in use 5. Identify service pack levels and hot-fixes for both OS and SQL Server 6. Identify SQL Server Authentication Mode (Integrated / Mixed) 7. Identify the major applications which are using SQL Server 8. Review configuration settings sp_configure 9. Obtain listing of databases and identify databases subject to audit sysdatabases 10. Review database options sp_dboptions 11. Obtain listing of database objects for each database sysobjects 12. Review server logins & ensure valid sysxlogins 13. Consider default and generic user-ids e.g. sa; probe 14. Ensure Windows NT / 2000 passwords options are appropriate 15. Ensure Windows NT / 2000 group membership 16. For databases subject to audit, evaluate users and ensure appropriate sysusers 17. Evaluate roles Server Roles Database Roles User Roles Application Roles 18. Evaluate use of dbo & guest for production databases 19. Evaluate database object ownership 20. Evaluate statement & object permissions, syspermissions sysprotects sp_helprotect 21. Evaluate audit trail and logging mechanisms 22. Evaluate control over utilities (e.g passwords scripted in batch jobs), bcp; isql 23. Evaluate back-up & recovery processes 24. Identify and evaluate use of remote /linked servers 25. Consider network security issues TCP/IP security, Network Protocol Libraries, encryption

    You might also like