In this on demand MSSQLTips webcast, you’ll learn SQL Server audit tips from the best expert possible – a Certified Information Systems Auditor. Brian Kelley has been an auditor for more than a decade and he’s also an accredited trainer for the CISA exam. Brian will show you how an auditor typically approaches auditing a system in general; then, he’ll apply that to an audit of a SQL Server environment.
You’ll learn what you should have ready beforehand to make the audit go as smoothly as possible and what types of information and evidence auditors look for. As part of that preparation, we’ll review and execute several scripts that will help you in your next SQL Server audit. Finally, we’ll talk about how to interact with the auditor during the engagement for maximum benefit to your organization.
Speakers
Brian Kelley is an author, columnist, Certified Information Systems Auditor (CISA) and former Microsoft Data Platform (SQL Server) MVP (2009-2016), focusing primarily on SQL Server and Windows security. Brian currently serves as a data architect as well as an independent infrastructure/security architect concentrating on Active Directory, SQL Server and Windows Server. He has served in a myriad of other positions, including senior database administrator, data warehouse architect, web developer, incident response team lead and project manager. Brian has spoken at 24 Hours of PASS, IT/Dev Connections, SQLConnections, the Techno Security and Forensics Investigation Conference, the IT GRC Forum, SyntaxCon, and at various SQL Saturdays, Code Camps and user groups.
Jeffrey Surretsky has worked at Quest since 2000 as a sales engineer, focusing on a wide variety of solutions, including Foglight, SharePlex and the Toad family of products. Before working at Quest, he was a DBA for various organizations, spanning a diverse range of industries, including Insurance and Telephony. With more than three decades of experience in the information technology industry, Jeffrey has a bachelor’s degree in computer science and a master’s degree in management of information systems.