Management implements database security controls: default account passwords changed and the accounts disabled or deleted where possible, or tracked and monitored where not, account access and privileges restricted to job needs and automated functions, password management including periodic change, vaulting of system passwords and complexity rules, encryption of data in transit and at rest by classification, configured and reviewed audit logs, regular monitoring of database activity including changes to sensitive data and security parameters or structure, independent monitoring of DBA and privileged activity, classification of data in the database, restriction and monitoring of data extraction and the further controls the booklet lists.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.