Enterprise Data Security - a Case Study

Abstract

This article is a case study about an Enterprise Data Security project including the strategy that addresses key areas of focus for database security encompassing all major RDBMS platforms. It presents the current state of database security tools and processes, the current needs of a typical enterprise, and a plan for evolving the data security. This strategy will help set direction for the blueprint of data security and provide a composite high level view of data security policies and procedures for the purpose of satisfying growing regulatory and compliance requirements and develop high level timeline and for all steps of development. This article presents a three steps strategy to address current outstanding audit concerns and positioning to more readily address the evolving regulatory landscape.

Keywords: Database Security, Encryption, Privacy, VISA CISP, PCI, GLBA, HIPAA, SOX, SB1386

JEL Classification: O31