Database Security
Database security is the set of tools, controls and practices that protect a database and the data it holds from unauthorised access, modification and loss.
What is Database Security?
Definition
Database Security is the set of controls protecting a database and the data inside it from unauthorised access, modification and loss: authentication and least-privilege access, encryption at rest and in transit, auditing of who read or changed what, and hardening of both the engine and its host. Databases attract attention because they concentrate value — one weakness there exposes far more than any single endpoint would. In cybersecurity practice the hardest part is usually privileged access: administrators and application service accounts routinely hold rights well beyond what the business process needs, and that is exactly what an attacker inherits when such an account falls.
Role in cybersecurity
Database Security plays an important role in building organizational resilience against cyber threats. Implementing appropriate mechanisms in this area is required by regulations such as NIS2, DORA and ISO 27001.