Please start any new threads on our new
site at https://forums.sqlteam.com. We've got lots of great SQL Server
experts to answer whatever question you can come up with.
| Author |
Topic |
|
tfountain
Constraint Violating Yak Guru
491 Posts |
 Posted - 2008-09-10 : 16:43:32
|
| We have a requirement from a new client to audit all requests to any PHI or PII data. I assume other DBAs have encountered this scenario since most shops store SSNs, names, addresses, etc. As far as SQL Server 2005 goes, what options do I have to log and audit these requests? I've looked at SQL Compliance Manager from Idera but right now that product is price prohibitive for the 6 servers I would need to maintain this on. I do not know much about C2 Auditing but will that generate enough audit information to fulfill this type of request?Now to make matters even more complicated, any Oracle gurus out here? I support both of these databases... what are the same options on this side of the world? |
|
|
swekik
Posting Yak Master
126 Posts |
Posted - 2008-09-10 : 17:09:38
|
| As far as i know C2 auditing will do,but you have to be careful with the disk space.Try to read this.http://msdn.microsoft.com/en-us/library/ms187634.aspx |
 |
|
|
tfountain
Constraint Violating Yak Guru
491 Posts |
Posted - 2008-09-11 : 16:06:41
|
| swekik, thanks for the response. I have read up on it but I'm still not certain exactly what detail this provides for me. I'd rather read on that before turning it on any of my servers. Now, with 2005, what's this new option about - Common Criteria Compliance (anyone)? |
|
|
|
|
|
|
Auditing options