{"id":19429,"date":"2019-08-15T19:56:42","date_gmt":"2019-08-15T19:56:42","guid":{"rendered":"https:\/\/www.process.st\/templates\/sql-server-audit-checklist-3\/"},"modified":"2024-02-28T23:55:51","modified_gmt":"2024-02-28T23:55:51","slug":"sql-server-audit-checklist-3","status":"publish","type":"post","link":"https:\/\/www.process.st\/templates\/sql-server-audit-checklist-3\/","title":{"rendered":"SQL Server Audit Checklist"},"content":{"rendered":"
\n

Introduction:<\/h2>\n
\n
\n <\/a>
\n <\/figure>\n<\/p><\/div>\n
\n

Server-side events logs and everything that comes with it can be a big stress.<\/p>\n

With SQL Server logging compliance standards tighter than ever<\/a> <\/strong>in the face of recent data security acts such as HIPAA, PCI DSS, and SOX, there is often so much that goes into the preparation for an SQL Server Audit that it can be confusing to keep track of everything.<\/strong><\/span><\/span><\/p>\n

On the other hand, the SQL Server Audit process has been greatly improved<\/a> in recent years by the addition of Extended Events logs, allowing administrators to audit everything that happens on each server<\/strong>, from large-scale changes to system settings right down to which user modified what specific value in a particular database at any given time.<\/span><\/p>\n

But still, despite all of these improvements to the server auditing process, it can still be daunting to get started without a formal process already in place.<\/p>\n

Alongside events log best practices, there are a number of related tasks you should be incorporating into any routine server best practice check<\/strong>, like system updates and data encryption. <\/span>These additional checks serve to support the audit process as well as harden overall server security.<\/p>\n

This checklist is designed to give you a head-start <\/strong>for preparation ahead of and including an SQL Server Audit. Though we've been rigorous, this checklist is just an example and is by no means exhaustive of every SQL Server security parameter.<\/p>\n

Nonetheless, let's dive right in!<\/p>\n<\/p><\/div>\n<\/section>\n

\n

Preparation:<\/h2>\n<\/section>\n
\n

Record basic details<\/h2>\n
\n

To begin with, record some basic information about yourself (or whoever is performing the server audit).<\/p>\n

All of this information goes towards ensuring data security best practices are enforced - it's important to know who had access to what information, and when. <\/p>\n

Just fill out each form field in this task<\/strong> before proceeding with the rest of the checklist.<\/p>\n<\/p><\/div>\n

\n
\n
\n
\n