While splashy external threats like denials-of-service and Trojan-based botnets might get all of the attention, many of the more dangerous threats to enterprise security lie inside the corporate firewall. Employees, partners, customers, consultants and other trusted insiders need access to sensitive documents and data in order to do their jobs, but ensuring that they don't abuse that trust by stealing company records, overstepping their permissions or erasing vital records is a major headache. A recent SearchSecurity.com survey of more than 700 security professionals found that more than 74% of respondents consider detecting and thwarting internal attacks to be a top priority for 2008. In this video, you will learn:

• How to implement internal controls to monitor access to sensitive database records
• Effective access-control policies
• Defenses against common database configuration mistakes

• Podcast: Countdown: Top five things you can do to lock down your database right now

Rich Mogull
Founder, Securosis
Rich Mogull is founder of independent security consulting firm Securosis and previously was an analyst at Gartner Inc. He has more than 17 years experience in information security, physical security and risk management.