Basic SQL Server security principles you can't afford ...
December 31, 2007[From Search SQL Server]
Where did the good old days of security go? I remember learning about the basic information security principles of least privilege, delegated administration and separation of duties way back when security wasn't cool. They were the cornerstones of effective IT administration and secure systems. Fast forward to today and it's rare to find these data protection principles in effect in any given network. Nowadays, we're so caught up putting out daily fires and managing the complexities of our systems that we're failing to integrate the core security data protection principles in our SQL Server environments.
The article continues at http://searchsqlserver.techtarget.com/tip/0,289483,sid87_gci1286934,00.html