asked on

Database Auditors

My department (Database Unit) is scheduled to be audited in January 2011. I've never be in this situation before, none have I done any database documentation.

Please, what exactly do I need to get prepared for database auditing.

How is database documentation done?

What needs to be documented for the auditing.

Any special template?

Please respond with detail steps.

Thanks

ASKER CERTIFIED SOLUTION

Raja Jegan R

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

Cboudroz

Normally its more about security.

Make sure your have a some rules wright down for security and that they can be confirm on the server:

ex:

List of DBA
List of Data reader
List of Data Writer
ALL User need to used Store procedure to access data
Sensitive data are encrypted (Credit card)
Difference between DEVELOPPEMENT server and production server.
Maintenance plan
...

Favorable

ASKER

Do you have a script that will list all the user and privilleges assigned?

SOLUTION