+APP.4.3.A21 Use of Database Security Tools (H)

APP.4.3.A21 Use of Database Security Tools (H)

Information security products SHOULD be used for databases. The products used SHOULD provide the following functions:

  • Creation of an overview of all database systems
  • Extended configuration options and rights management for databases
  • Detection and prevention of possible attacks (e.g. brute force attacks on a user account or SQL injections)
  • Audit functions (e.g. checking configuration requirements)

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.46 Loss of Integrity of Sensitive Information