Design your systems and processes for auditability

I have worked in more than one regulated industry, and since the banking crisis of 2008, I have witnessed a sea change in the approach to regulation.  The UK Financial Services Authority (FSA) was seen to be a toothless tiger.  The UK government replaced the FSA with two separate bodies, each with its own more […]

Checking Up on Vendors

Being able to audit the actions others take on your systems is important to Steve, especially when working in the cloud.

Constant Integration

Apple buys a company every few weeks. The data integration for this must be a large effort.

The Managed Instance Audit Targets

Finding Failed Logins

Generic trigger for maintaining the Audit Log

This trigger will work even if you don't have the primary key on any table. Mechanism to configure the primary key in config table has been provided. This can be very helpful to solve the system audit requirements without much efforts.

Disclaimer : Audit Log trigger has performance overhead. It’s meant for table which is not frequently updated, deleted or inserted. Please take precaution when creating the trigger on the table having too many columns.

Database Auditing

Audit Users logging in using "sa" or service accounts

Security is probably one of a production DBA's most important tasks and if developers use application or service accounts to run queries in your production environment you need to identify then and prohibit it. I notice some unwanted activity after staring a new job and decided to create a script that notifies me via email when […]

Auditing DDL Actions

Failed and Successful Login Auditing Using xp_readerrorlog

Script uses undocumented extended stored procedure xp_readerrorlog to find failed logins (grouped) and last successful login