If you’re responsible for database security and feel like scaring the living daylights out of yourself, check out www.privacyrights.org/data-breach. It’ll give you some idea of just how large of a problem security breaches truly are. Significant breaches are happening on almost a daily basis—and sometimes multiple major breaches are occurring in a single day.
And if that alone doesn’t do it, consider that according to the 2010 Verizon Business Study, more than 92 percent of records breached involve a database. Unfortunately, the bad news doesn’t end there.
Think you can just harden your databases with the vendors’ own security software? It’s possible, I suppose—but not likely. According to annual research by CERT, up to half of database security breaches are committed by internal users. Think about the disgruntled employee who can’t stand the place and is only sticking around until he finds another job. How are you going to protect your databases from somebody like him—somebody who’s wearing your company’s badge but can’t wait to take it off?
Companies’ most critical and sensitive data resides in databases. And the amount of information that companies store and manage is growing at an unprecedented pace. This creates pressure on IT to deliver intelligent and secure protection of that information.
One solution that can really help is McAfee Database Security. It enables IT to deliver intelligent, secure protection over the sensitive data stored in your company’s mission-critical databases as well as defend all your endpoints, servers, and networks at the same time.
Regulatory standards such as PCI DSS, HIPAA, Sarbanes-Oxley, GLBA and SAS-70 require specific controls over access to sensitive financial information and customer data typically stored in databases. A key issue to consider when purchasing a database security solution is making sure you have a secure audit trail for tracking and reporting activity involving confidential data.
The McAfee Database Security solution can help here, too. It offers a holistic view of security that can minimize the resources needed during the audit process, while seamlessly protecting data from a damaging breach and maintaining optimum database performance.
Of course, you’ve got to be able to see it to manage or report on it. In the realm of database security, the McAfee ePolicy Orchestrator console provides visibility into security and compliance postures across data, applications, endpoints, servers, and networks.
Now that you’ve seen just how essential effective database security is to protecting your data, you probably want to do something about it. I mean, it’s your company’s reputation and profitability on the line, right?
If you’re interested in learning more about the need for highly effective levels of database security, I would urge you to go to mcafee.com/dbsecurity for more information.
–Eric
Tags: data breach, database security, enterprise, ePolicy Orchestrator, Risk and Compliance
Submit your own comments / message for this post