3 ms·
I'm interested to know how your system ensures that anyone accessing PII goes through the system. Don't sysadmins have full access to the db? When you are grant
by tajen 11y ago
I'm interested to know how your system ensures that anyone accessing PII goes through the system. Don't sysadmins have full access to the db? When you are granted access, can you see the full table or just the row about this user?
- Retric 11y agoIt's not that hard to keep all PII encrypted in the DB. Ideally, PII should only be decrypted inside your application. Though at a minimum https://en.wikipedia.org/wiki/Transparent_Data_Encryption https://en.wikipedia.org/wiki/Transparent_Data_Encryption should be used.