How can you monitor the server and database for unauthorized access?

Question

Monitoring

In Europe, the GDPR (General Data Protection Regulation) is coming. One of the points requires monitoring whether personal data has been stolen and if suddenly it was, then warn all users. How to monitor it?

Answer 1

There are third-party software solutions, for the Russian Federation there are competitors in the euro zone. In the Russian Federation there were Shield-RZD, Dallas Lock. These products are certified by the FSTEC as protection against unauthorized access, including. Some will not allow you to connect an unauthorized USB flash drive to the system. It was like the ability to track actions.

Answer 2

From the situation.
What do you really need?
Monitor? Then there are countless ways to write six logs and/or create event alerts.
Meet requirements? Well, then scroll through the best practices.
Get a license/certificate? Then read the requirements.
Just ask yourself the same question "why". As an option "to what"

Answer 3

here it is necessary to approach it comprehensively, I start from account management, then audit tables,
take iso27001 and 27002, go through it.
01 is what it should be 02 is how to implement it.