+APP.4.3.A25 Security Audits of Database Systems (H)

APP.4.3.A25 Security Audits of Database Systems (H)

Security audits SHOULD be carried out on database systems at regular intervals. The systemic and manufacturer-specific aspects of the database infrastructure (e.g. directory services) used and the database management system deployed SHOULD be considered within the framework of security audits.

1. Overview

1.1 References

1.2 Identified Requirements

1.3 Related Regulations

2. Identified Requirements

Requirements

3. Related Regulations

Regulations

Linked Issues

Issuelinks
blocks G 0.15 Eavesdropping
blocks G 0.18 Poor Planning or Lack of Adaptation
blocks G 0.19 Disclosure of Sensitive Information
blocks G 0.21 Manipulation with Hardware or Software
blocks G 0.22 Manipulation of Information
blocks G 0.23 Unauthorised Access to IT Systems
blocks G 0.26 Malfunction of Devices or Systems
blocks G 0.30 Unauthorised Use or Administration of Devices and Systems
blocks G 0.39 Malware
blocks G 0.46 Loss of Integrity of Sensitive Information