Gladys Turnbull
Submitted to: Professor Kevin Reynolds
SEC 574 Database Security
Keller Graduate School of Management
Submitted: 22 August 2012
Abstract: SIDPERS Security Plan developed for the Virgin Islands National Guard is procedural protection of this highly sensitive database holding the personnel records of over 960 active service members and over 10,000 retirees’ skeleton military personnel records. It is with great err on caution that we recommend and enforce the highest level of tiered defense in depth security measure to maintain the confidentiality, integrity and accessibility of this data; because we know its’ compromise and/or loss will reap great distress in soldiers’ and their families’ lives.
TABLE OF CONTENT I. Project Identification and Business Environment .......................... 3 II. Architecture and Operating System Considerations
SIDPERS Architecture........................................................................3
Security Requirement..........................................................................5
III. User Account and Password Administration
User Administration.............................................................................6
Password Policies.................................................................................6
Profile definition and assignment..........................................................7
IV. Privileges and Roles
Security Model........................................................................................7
Roles........................................................................................................7
System privileges/ Object privileges ......................................................8
V. Database Security Operations
Database Logging...................................................................................8
Activity
References: 2. Click OK to close the message box. (SUM, 2011) Quality Assurance (QA) Reports - The QA Reports function is performed by running SQL scripts to identify invalid and conflicting data Afyouni, Hassan, Database Security and Auditing, Protecting Data Integrity and Accessibility, 2006 Thomson Course Technology Department of Army (AR 600-8-20) SIDPERS Handbook for Commanders, 1 April 1986; http://www.apd.army.mil/pdffiles/p600_8_20.pdf