simpl.
로그인
사이버보안 GRC 16개 항목

Database Security Hardening Review

이 체크리스트는 영어로 제공됩니다.

Reviews security hardening of relational and NoSQL database platforms, covering access control, encryption, auditing, configuration, and patching against CIS Benchmarks.

CIS BenchmarksNIST 800-53PCI DSS

무료 PDF 또는 Word · 이메일을 입력하면 다운로드할 수 있습니다.

Access Control

  • Are database accounts individually attributable and provisioned on least privilege? *
  • Are default and sample accounts removed or disabled? *
  • Is administrative access to the database restricted and separated from application accounts? *
  • Is the database bound to internal interfaces and not exposed to the public internet? *

Encryption

  • Is encryption at rest (TDE or volume-level) enabled? *
  • Is TLS enforced for all client-to-database connections? *
  • Are encryption keys managed in a KMS or HSM separate from the data? *
  • Are sensitive columns (PII/PAN) masked, tokenized, or field-encrypted?

Auditing & Monitoring

  • Is database auditing enabled for privileged actions and schema changes? *
  • Are failed logins and access to sensitive objects logged? *
  • Are database logs forwarded to a central SIEM? *
  • Is database activity monitoring (DAM) deployed for critical databases?

Configuration & Patching

  • Is the database configured against a CIS Benchmark or vendor hardening guide? *
  • Are security patches applied on a defined schedule? *
  • Are unnecessary features, stored procedures, and network ports disabled? *
  • Are production backups encrypted and access-controlled?

Database Security Hardening Review 체크리스트 전체 다운로드

인쇄하기 좋은 PDF 또는 편집 가능한 Word 문서로 무료로 받으세요.