Security of the database

AndrewBrown

Suggestions:

1. Publicize the name of the person in charge of the database (keeper of the password). Consider making that person an officer of the corporation.
2. All connections to the database must use 'stored procedures'.

This data could be used as evidence one day.

Aaron

Hi Andrew. I'm not sure what you're trying to suggest here? We keep our database extremely secure, following industry best practices around access control, audits, and encryption of all data in flight and at rest.

AndrewBrown

Is the database configured to require all connections to use stored procedures?

If not, why not?