QOD 10/10/2003

Question

Post reply

QOD 10/10/2003

Keith Henry

Hall of Fame

Points: 3759
More actions
September 10, 2003 at 2:19 am

#151924

There are quite a few QODs on C2 auditing. Is it some sort of government requirement in the US? I can't see any reason why you would need to turn it on unless you are in the Army.

I think we have a similar requrement in Europe (ITSEC) but I don't know wether they are compatible.

Who needs this level of security anyhow? No sql logins, No OLAP, No Full text, No Mail and no distributed trans.

Keith Henry

Keith Henry

According to everyone I know I "do something with computers?" for a living, so there you go.

Viewing 7 posts - 1 through 6 (of 6 total)

You must be logged in to reply to this topic. Login to reply

Frank Kalis SSC Guru Points: 111183 More actions · Answer 1

Hi Keith,

quote:

There are quite a few QODs on C2 auditing. Is it some sort of government requirement in the US? I can't see any reason why you would need to turn it on unless you are in the Army.

I think we have a similar requrement in Europe (ITSEC) but I don't know wether they are compatible.

Who needs this level of security anyhow? No sql logins, No OLAP, No Full text, No Mail and no distributed trans.

I think you are right. There are governmental requirements.

Maybe this thread will clear thing a bit

http://qa.sqlservercentral.com/forum/link.asp?TOPIC_ID=15251

It contains two links that explain C2 a little bit closer than BOL does

Frank

--
Frank Kalis
Microsoft SQL Server MVP
Webmaster: http://www.insidesql.org/blogs
My blog: http://www.insidesql.org/blogs/frankkalis/[/url]

Keith Henry Hall of Fame Points: 3759 More actions · Answer 2

Keith Henry

Hall of Fame

Points: 3759

September 10, 2003 at 3:21 am

#473369

Thanks.

Keith Henry

According to everyone I know I "do something with computers?" for a living, so there you go.

Steve Jones - SSC Editor SSC Guru Points: 728159 More actions · Answer 3

Tend to agree. Not sure who needs else needs it, possibly banks (financials).

More of a pain, but it's easy to pick on for questions.

Steve Jones

sjones@sqlservercentral.com

http://qa.sqlservercentral.com/columnists/sjones

The Best of SQL Server Central.com 2002 - http://qa.sqlservercentral.com/bestof/

http://www.dkranch.net

Follow me on Twitter: http://www.twitter.com/way0utwest
Forum Etiquette: How to post data/code on a forum to get the best help
My Blog: www.voiceofthedba.com

Greg Charles SSC-Forever Points: 45403 More actions · Answer 4

Greg Charles

SSC-Forever

Points: 45403

September 11, 2003 at 10:30 am

#473757

The IRS often requires C2 auditing of databases before sharing their tax data with state agencies. They're pretty particular about knowing who sees their data.

Greg