What you can do to protect your SQL Server and why it matters
summary
Summarizes the CIS Benchmarks for SQL Server 2019 (~103 pages) with concrete controls: set TRUSTWORTHY off, disable ad hoc distributed queries, avoid Database Mail when possible, remove xp_cmdshell, restrict DAC remote access, randomize/disable sa, prefer Windows auth, and monitor startup procs. Shows tooling and outcomes: custom PowerShell plus DBAtools/DBAchecks scans produce a compliance score and Power BI/Excel reports for auditors, and recommends using extended events/audits for logins instead of filling the error log.
AI-written summary · about
chapters (10)
- 0:00Intro
- 1:46What is the CIS Benchmark for SQL Server
- 4:15Why do we need the CIS benchmark?
- 7:28Section 1 Installation, Updates and Patches
- 8:40Section 2 Surface Area Reduction
- 10:27Surface Area Reduction pt 2
- 12:55Authentication and Authorization
- 15:48Auditing and Logging
- 17:434 Password Policies
- 18:39What's Missing?
related talks
21mWhat you can do to protect your SQL Server and why it matters
54m10 Deadly Sins of SQL Server Configuration
48mProtecting the confidentiality and integrity of your high value data with Azure SQL and SQL Server 2
40mUnderstanding the cryptographic controls in Azure SQL Database
27mHow to Be Your Security Team's Best Friend
52mDetecting Malicious Activity: Unveiling the Secrets of MS-SQL Logging
29mTop 10 Tips of Architecting Secure-First Software
45mA to Z Azure SQL Security Concepts