サイバーセキュリティGRC 16項目
Database Security Hardening Review
このチェックリストは英語版です。
Reviews security hardening of relational and NoSQL database platforms, covering access control, encryption, auditing, configuration, and patching against CIS Benchmarks.
CIS BenchmarksNIST 800-53PCI DSS
無料のPDFまたはWord・メールアドレスを入力してダウンロード。
Access Control
- Are database accounts individually attributable and provisioned on least privilege? *
- Are default and sample accounts removed or disabled? *
- Is administrative access to the database restricted and separated from application accounts? *
- Is the database bound to internal interfaces and not exposed to the public internet? *
Encryption
- Is encryption at rest (TDE or volume-level) enabled? *
- Is TLS enforced for all client-to-database connections? *
- Are encryption keys managed in a KMS or HSM separate from the data? *
- Are sensitive columns (PII/PAN) masked, tokenized, or field-encrypted?
Auditing & Monitoring
- Is database auditing enabled for privileged actions and schema changes? *
- Are failed logins and access to sensitive objects logged? *
- Are database logs forwarded to a central SIEM? *
- Is database activity monitoring (DAM) deployed for critical databases?
Configuration & Patching
- Is the database configured against a CIS Benchmark or vendor hardening guide? *
- Are security patches applied on a defined schedule? *
- Are unnecessary features, stored procedures, and network ports disabled? *
- Are production backups encrypted and access-controlled?
Database Security Hardening Reviewチェックリストの完全版をダウンロード
印刷しやすいPDF、または編集可能なWord文書で無料で入手できます。