Microsoft SQL Serverhttp://www.checklist20.com/bestpractices.htmlMicrosoft SQL Server Audit Plans and ChecklistMinimize Surface Areahttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=205&tn=Minimize Surface Area ...  View More]]>Manage Service Accountshttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=206&tn=Manage Service Accounts ...  View More]]>Authenticate accountshttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=207&tn=Authenticate accounts ...  View More]]>Secure Network Setuphttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=208&tn=Secure Network Setup ...  View More]]>Disable System Stored Procedureshttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=209&tn=Disable System Stored Procedures ...  View More]]>Ensure strong password policyhttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=210&tn=Ensure strong password policy ...  View More]]>Restrict Administrative Privilegeshttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=211&tn=Restrict Administrative Privileges ...  View More]]>Manage Database Ownershiphttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=212&tn=Manage Database Ownership ...  View More]]>Manage Schemashttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=213&tn=Manage Schemas ...  View More]]>Manage access to database objectshttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=214&tn=Manage access to database objects ...  View More]]>Manage cataloghttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=215&tn=Manage catalog ...  View More]]>Control remote data executionhttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=216&tn=Control remote data execution ...  View More]]>Encrypt sensitive datahttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=217&tn=Encrypt sensitive dataEncrypt high-value and sensitive data. ...  View More]]>Encrypt sensitive datahttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=218&tn=Encrypt sensitive dataEncrypt high-value and sensitive data. ...  View More]]>Enable security auditinghttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=219&tn=Enable security auditingEnable security auditing of Sysadmin actions, fixed role membership changes, all login related activity, and password changes. After selecting appropriate auditing options, script the audit, wrap it in a stored procedure,and mark that stored proce ...  View More]]>Execute Microsoft security utilities periodicallyhttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=220&tn=Execute Microsoft security utilities periodically ...  View More]]>Stay current on patcheshttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=221&tn=Stay current on patches ...  View More]]>Ensure the physical security of your server.http://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=222&tn=Ensure the physical security of your server. ...  View More]]>Use secure file Systems http://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=223&tn=Use secure file Systems ...  View More]]>Secure installhttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=224&tn=Secure install ...  View More]]>Backup policyhttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=225&tn=Backup policy ...  View More]]>Prevent SQL injectionhttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=226&tn=Prevent SQL injection ...  View More]]>Create security awareness programhttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=227&tn=Create security awareness programEnsure that members of your development team understand major security issues: current threats, security trends, changing security environments, and attack scenarios. Require relevant security training for all developers and testers. Increase the ...  View More]]>Secure MSDE installationshttp://www.checklist20.com/bestpractices.html#cid=143&cn=Microsoft SQL Server&tid=228&tn=Secure MSDE installationsIf MSDE  is distributed with application, the following additional guidance applies:Install MSDE using "Windows security mode" as the default.When distributing MSDE to customers, use the Microsoft-supplied installer rather than merge modules. ...  View More]]>