Question

After reading the required resources for this module and reviewing the database you just designed for your final project, think about what security considerations should be taken with the design. Write these considerations in the form of a database design security checklist that includes your top six to eight security implications for the database design.

A security assessment checklist is a common practice in the industry and proves to a CIO or IT auditor that you are following best practices in securing a database. It also serves as a living document to assist you in your design process. For example, on the networking side of IT, Cisco provides this checklist for small and medium business to evaluate their network infrastructure. You will use the information from this website to assist you in creating your own checklist.

For this discussion, you will develop something similar, but for databases. Post your checklist to the discussion forum. You will not see your peers’ initial posts until you have posted your own checklist.

Upon reviewing your classmates’ checklists, provide substantive responses to at least two of your classmates on their checklist. Your responses should include items such as whether their checklist will manage risk appropriately and whether the checklist will maintain the databases’ confidentiality, integrity, and availability.

Answer 1

The database design security list is as follows:

1) During database design we should make sure that only database views are exposed to the application. we mean to say applicaion should interact with database through views rather than interating with tables. So we need to use database views instead of tables

2) Write store procedures which includes all the logic and make store procedures secure.

3)Make sure to implement various authentication policies in database design. Various read write privileges should be well defined.

4)We can also encrypt our database completely to make it more secure .

5) Database users should also be defined with proper privileges.