The Apply Regulation window of the Configuration wizard allows you to apply regulation guidelines to the selected, audited databases. IDERA SQL Compliance Manager configures your audit settings according to the selected guidelines. Note that if you already have audit settings configured, applying new regulation guidelines overrides the existing settings.
After selecting your regulation guidelines and completing the wizard, you must then configure the following audit settings, if not already set:
- Privileged users
- Privileged user audited activity
- Sensitive columns
- Permissions to list server roles and logins
Check the box for the regulation guidelines you want to enforce, and SQL Compliance Manager displays a description of that guideline and what it can do for your organization.
If you choose a regulation guideline(s) and update it, you can save the changes as a custom template at the end of the wizard.
Select the regulation guideline(s) you want to apply, and click Next.
Available fields
CIS
Allows you to apply regulation guidelines for the Center for Internet Security (CIS).
The CIS Regulation Guideline is only available at the server level.
DISA STIG
Allows you to apply regulation guidelines for the Defense Information Security Agency (DISA STIG).
FERPA
Allows you to apply regulation guidelines for the Family Educational Rights and Privacy Act (FERPA).
GDPR
Allows you to apply regulation guidelines for the General Data Protection Regulation (GDPR).
HIPAA
Allows you to apply regulation guidelines for the Health Insurance Portability and Accountability Act of 1996 (HIPAA).
NERC
Allows you to apply regulation guidelines for the North American Electric Reliability Corporation (NERC).
PCI DSS
Allows you to apply regulation guidelines for the Payment Card Industry Data Security Standard (PCI DSS).
SOX
Allows you to apply regulation guidelines for the Sarbanes-Oxley Act (SOX).
Custom
Allows you to upload and apply a custom audit settings regulation.
When uploading a custom regulation, the file needs to be in XML format to proceed successfully with the wizard.
Sensitive columns and Before-After data settings are not included when uploading a custom regulation.
Before-After and sensitive columns need to be configured with each server/database.