MSSQL Check

1. 1. How do you back up your SQL Server databases?

   Full backups plus log backups, aligned with the recovery model and the acceptable data lossOnly regular full backups, no log backupsThe server is backed up as a whole (VM snapshot or file backup) – without SQL-native backupsI don't know
2. 2. Where are your database backups stored?

   In a separate location, protected against ransomware (offline, immutable or at another site)On another server or NAS in the same networkOn the same server as the databasesI don't know
3. 3. When did you last test restoring a production database?

   Within the last six months, documented – including how long it tookLonger ago than thatNever, or I don't know
4. 4. Do you verify the consistency of your backups?

   Yes – backups run with CHECKSUM and are verified regularly (RESTORE VERIFYONLY or a test restore)Backups complete, but they are never verifiedNo, or I don't know
5. 5. Is the connection between applications and SQL Server encrypted?

   Yes – TLS is enforced with a valid certificate (force encryption)Encryption is possible but not enforced – or only with a self-signed certificateNo, unencryptedI don't know
6. 6. Are database files and backups encrypted (e.g. TDE or backup encryption)?

   Yes – databases and backups are encryptedPartially, e.g. only the backupsNo, or I don't know
7. 7. How do users and applications authenticate to SQL Server?

   Windows/AD authentication wherever possible; SQL logins only where necessary, with strong, individual passwordsMixed – including shared SQL logins used by several people or applicationsMainly SQL logins with simple or never-changed passwordsI don't know
8. 8. Who has sysadmin rights on your instance – and is the sa account secured?

   Only a few named administrators; sa is disabled or renamed; applications run with minimal permissionsApplications or several people also have sysadmin rightssa is actively used, e.g. by applicationsI don't know
9. 9. Do integrity checks (DBCC CHECKDB) run regularly on your databases?

   Yes, regularly – and errors would be reported automaticallyOccasionally, or only manuallyNo, or I don't know
10. 10. Are indexes and statistics maintained regularly?

    Yes – with proven maintenance jobs, tuned to our databasesThere is a default maintenance plan that has never been reviewedNo, or I don't know
11. 11. How up to date is your SQL Server?

    Supported version, cumulative updates are applied in a controlled waySupported version, but rarely or never patchedA version out of support (SQL Server 2016 or older)I don't know
12. 12. Do you notice when a backup or maintenance job fails?

    Yes – failed jobs automatically trigger a notificationOnly if someone checks manuallyNo, or I don't know

Please answer all questions – at least one answer is still missing.