What are the Microsoft SQL 2008 R2 Enterprise software security practices for Cencon 4 Locks

Question

What are the Microsoft SQL 2008 R2 Enterprise software security practices for Cencon 4 Locks?

Answer

Physical 

• Do not leave passwords in the open.
• Do not leave Cencon logon keys in the reader.
• Do not write passwords on the key.
• If the system is not in use or is unattended, lock the terminal.
• Use BIOS and screensaver passwords to guard against unauthorized access.

 Network

• Insider Hacks are the least preventable and the most destructive types.
• Have your HR department inform you before an employee is terminated.
• Set policies to constrain bandwidth availability for suspicious traffic. Port 80 for example is used for HTTP, Web surfing, streaming video, peer-to-peer sharing, music downloads, etc. 

System

• Change password on all default accounts.
• Remove guest and other non-used accounts.
• Give specific access to SQL, transaction logs, and backups files, as needed.
• Make certain no hierarchical group or user policies are allowed access to SQL, transaction logs, and backup files.
• Limit or remove access to FTP.
• Review network IP protocols.
• All backups, exports, import files & scripts are possible sources of passwords/user names. Secure access to them.
• Learn about your USERS. If your users are working hours are between 9:00 AM and 5:00 PM, then any access at nights or weekends is suspect. Monitor and set alarms for this access. 

SQL

• Change password on all default accounts.
• Lock or delete all non-used default accounts.
• Set policy in SQL to only allow 8 attempts to login before lockout.
• All backups, exports, import files & scripts are possible sources of passwords/user names. Secure the access to them.
• Check your alert logs REGULARLY for user access failures or unusual access errors.
• Always test scripts on a test server, never the live database.
• Monitor or set limits on very large queries. Hackers generally search whole databases.