It's the CISO's job to balance the business need that data be available and shared with partners, suppliers and customers, while putting controls in place to fend off trusted insiders and malicious outsiders--and appease auditors. All the while, data grows in near immeasurable volumes and is accessible via many avenues on the Internet and corporate extranets. Adding to the stress is the often routine practice of replicating databases for backup, high availability and--too often--for development. Their content is accessed and stored by myriad applications, partners and customers, sometimes in ways you don't appreciate or even suspect.
In short, data lives everywhere, and security constantly tries to keep up with a moving target.
Whether your company is built on a strong foundation of data governance and intelligent risk management, or has been forced to "do something" because of PCI, Sarbanes-Oxley, HIPAA, SB 1386 or other regulatory mandates, it's obvious that the cost of weak data security is greater than the implementation of strong controls. Here are the top database security challenges facing corporations today, and guidance on how to meet them.
