Data security management system and process

Data Security management System:

1, after the successful installation of MySQL immediately delete the Mysql.user table in addition to the local host root account of all accounts.

2, for the server local root account set a more complex password, including letters and numbers, and should be replaced on a regular basis. The account to be developed for connecting to the database must be established separately, and the password will be mastered by the chief of operation and maintenance.

3, regularly updated database root account and password to inform the technical Director, the Database manager, other people need to know the root account password, the need to write to the technical director of the application request, approved to obtain the password.

4, daily to do a global backup of the database, and save in the non-system disk. Every day also to do a regular off-site backup of the database, fixed to save in the local area network of other secure computers.

5, before the data recovery, the database administrator needs to register a formal, written data recovery report, and submitted to the technical director and the data supervisor for approval. Each data recovery should be recorded for the record. Before the data is restored, data from the original environment must be backed up to prevent useful data loss.

6. Before the data physical deletion, the database administrator shall register the formal and written data cleaning report, and submit it to the technical director and the data supervisor for approval. Every data cleanup should be recorded.

7. Data must be backed up before it is cleaned before it can be cleaned up after confirming the correct backup. Pre-clean backup data should be regularly saved or permanently saved according to the backup strategy, ensuring that it can be used at any time. The implementation of data cleanup should avoid the peak of the business, avoiding the impact on the operation of the online business.

Database modification Process:

1. Before modifying the database structure, database table or table field, the applicant must submit the application to the technical manager, and the technical manager can make an application by mail to the database supervisor after confirming that it may be modified. After the two sides negotiated correctly, make the database modification. After the modification is complete, the database supervisor is required to explain the details and the results of the process to the technical manager via mail.

2, for the database catalogue data modification, through the product manager to the database supervisor to submit mail application. The two sides confirm the application is correct, make database modification. After the modification is complete, the database supervisor explains the details of the processing and the results of the processing to the product manager via mail.

3, the business unit of data query, statistics, analysis requests, should be submitted to the product manager, the product manager to confirm that can be provided after the request to the database supervisor to send a message. After the database manager has finished processing the database, it sends the required data to the product manager by mail.