LASCON 2017

The greatest trust a client places in your company is when they make you the custodians of their data. In fact, a data breach is considerably more likely to do your client relationship lasting damage or even land you in legal proceedings with them than an incomplete feature delivery or a late bug fix. Still, in all too many technology organisations database security is an afterthought. We rely on trusted DBAs, forgetting they are humans too, with all too human traits. What happens when your greatest threat is internal to your organisation? In sashays GDPR and suddenly things get really interesting....

This talk is based on Sarah-Jane’s original practicum paper “Detecting Internal Database Fraud” and some sobering real life episodes from her work in secure data management. There is still hope as this talk will present strategies whereby engineering and operations teams can come together to protect the corporate gold - your data.