New answers tagged

2

I think it's going to be extremely difficult, if not impossible to do this. Think about ALL the places where customer data exists, or can be accessed from: Production SQL servers. Development SQL servers. Backup servers. Production webservers. Development webservers. You probably are already auditing production webservers. But what about development ...


2

If there's a way to access data without an audit log, secure the credentials required to access it that way and audit their access. Software such as Vault is geared toward this. Physical control of an MFA token such as storing it on a YubiKey and then putting that in a safe place with somebody who doesn't control the password would provide you with dual ...



Top 50 recent answers are included