SQL Server 2012 Security & Compliance

Benefit from the most secure database of any of the major database platforms - SQL Server has recorded the fewest numbers of vulnerabilities. [ITIC Study, September 2010]

Protect Data

• Take advantage of a built-in cryptography hierarchy.

• Encrypt data transparently.

• Employ Extensible Key Management.

• Sign code modules.

• Built on top of great SQL Server features.

Cryptography Enhancements

• Ability to create certificates from bytes.

• Default Server Master Key (SMK), Database Master Key (DMK), backups key using AES256.

• New support for SHA2 (256 and 512).

• Usage of SHA512 for password hashes.

Controlled access to data by managing authentication and authorization effectively and by providing access to only users who need it.

User-Defined Server Roles

• Increase flexibility, manageability and facilitate compliance towards better separation of duties.

• Roles can be nested to allow more flexibility in mapping to hierarchical structures in organizations.

• Prevents organizations to use sysadmin for database administration.

Default Schema for Groups

• Increases database compliance with Windows Group rather than individual users.

• Eases administration of database schema, decreases the complexity of database schema management through individual Windows users.

• Prevents errors of assigning schema to the wrong users when users change groups.

Contained Database Authentication

• Increases compliance by allowing users to be authenticated directly into user databases without logins.

• Reduces the needs to login to the database instance and avoid orphanes or unused logins.

SharePoint Active Directory

• Secure and end user data analytics with built-in IT controls.

• Enhance security models provide control at row and column level.

Ensure compliance with company policies and/or government regulations like HIPAA and PCI.

SQL Server Audit for All Editions

• Allows organizations to expand the benefits from Enterprise edition to all editions.

• Better performance and richer features.

Audit Resilience

• Delivers the ability to recover auditing data from temporary file and network issues.

User-Defined Audit

• Allows application to write custom events into the audit log to allow more flexibility to store audit information.

Audit Filtering

• Provides greater flexibility to filter unwanted events into an audit log.