Database Security
What is Database Security?
Measures for protecting database management systems from attacks, unauthorized access, and data breaches including access controls and encryption.
Terms that appear alongside database security
Each of these is named in at least one of the same controls as database security. The number is how many controls name both.
- audit 2 shared controls
- breach notification 2 shared controls
- data security 2 shared controls
- information security policy 2 shared controls
- policy 2 shared controls
Frameworks that govern database security
What the standards actually require on database security
Requirements naming database security across 5 standards, quoted from the control text.
Management implements or enables database controls commensurate with the sensitivity of the data, including encryption, controls user access under least privilege with authorisations tailored to each person, strengthens authentication and monitoring for applic...
ffiec-it-examination-handbook::IS-II.C.18 · II.C.18 Database Security (Information Security) →Distributed ledger networks that record data from several participants using cryptography, consensus, smart contracts and replication may support GxP processes such as supply chain track and trace, and the guide gives the GxP practitioner considerations for re...
gamp-5-good-automated-manufacturing-practice::D10 · Appendix D10 Distributed Ledger Systems →Standard 7 per Section 35 + the Schedule of the Jamaica Data Protection Act 2020: Personal data shall be processed in a manner that ensures appropriate security including protection against unauthorised or unlawful processing + accidental loss + destruction or...
JM-DPA2020-Standard7-Security-Sec35-Appropriate-Technical-Organisational-Confidentiality-Integrity-Availability-Resilience · Jamaica DPA 2020 Standard 7 - Security + Section 35 + Appropriate Technical and Organisational Measures + Confidentiality + Integrity + Availability + Resilience + Encryption + Pseudonymisation + Risk-Based Security →Access to administer network, operating system, application and database security and system parameters is limited to IT personnel under supervision of IT supervisory or management staff;
nevada-gaming-control-board-cybersecurity-requirements::MICS-IT-24 · IT MICS #24 Administration of security and system parameters limited to supervised IT personnel →Contracts with ASPs mandate: changing default passwords; no trivial passwords; centralised IAM with strong passwords, risk-based MFA, least privilege and SoD; privileged access through PIM or IAM; network segregation;
rbi-cybersecurity-framework-for-banks::138 · Para 138: 24 baseline cyber controls mandated in ASP contracts →Questions people ask about database security
What is Database Security?
Why is Database Security important for compliance?
Which compliance frameworks address Database Security?
Where can I learn more about Database Security?
See how Database Security applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.