SOX

Question

Post reply

SOX

Nita Reddy

SSCarpal Tunnel

Points: 4177
More actions
January 23, 2007 at 10:07 am

#153397

Does anyone knows any TOOL which will be helpful in SOX compliance for all the database activity.
Thanks
Nita

Viewing 8 posts - 1 through 7 (of 7 total)

You must be logged in to reply to this topic. Login to reply

MohammedU SSCoach Points: 19644 More actions · Answer 1

Lumigent... audit db...and many more.. just google...

http://www.lumigent.com/go/googent/

http://www.red-gate.com/products/SQL_Log_Rescue/index.htm?gclid=CIq-zqCi94kCFRTMggodZFYgWQ

http://www.krell-software.com/index.asp

MohammedU
Microsoft SQL Server MVP

Louis Lam-391748 Ten Centuries Points: 1083 More actions · Answer 2

http://www.guardium.com

They are really good and SOX complain.

Eric Peterson Hall of Fame Points: 3192 More actions · Answer 3

I like a tool called IPMonitor8, it is powerful, inexpensice and my SAS 70 auditors loved it.

http://www.ipmonitor.com/default.aspx

it does a great job of monitoring my disk space, SQL Server, nightly jobs....and sends emails when it detects an error. And the best part was that they have a 21 day trial, so we could try the full product before purchase ($995).

Eric

Eric Peterson Hall of Fame Points: 3192 More actions · Answer 4

My Advice on a SOX or SAS70 audit

1) Completely document all policies, procedures and schedules.

2) Document all changes to the production system....no matter how small including testing of the changes.

3) Have automatic monitoring tools in place.

are we having fun yet?

Eric

awilbournsqlcentral Old Hand Points: 363 More actions · Answer 5

We are using the Idera SQL Compliance product. It is able to run without having Admin permissions for the OS. The account that does the auditing does have to be SysAdmin. They basically have SQL Traces dumping to disc and have an agent that pushes those logged events to their repository. It has a lot of neat features. It is not the cheapest, but when you deal with SOX what is cheap.

http://www.idera.com/Products/SQLcm/Default.aspx

rguier 61805 SSC Rookie Points: 26 More actions · Answer 6

Take a looks at DIAB from diabsqlsoftware.com although it's primary purpose is SQL server monitoring and diagnostics it has SOX compliance tools builtin. It does this without adding any objects to the servers being monitored. It will alert you if anyone alters a permission at the role or object level, easily identifies changes, and can export reports to excel for auditors.

feroz.durani SSC Rookie Points: 43 More actions · Answer 7

Hi Nita,

BMC's Remedy ticketing system has SOX compliance.

Feroz