[sims] Is a SIMS backup .bak secure?

[snagrat]

The LEA create backups of SIMS/FMS and save them as a .bak file. This is then part of our backup set.

 

Question is whether that .bak is secured in anyway. i.e only useful if you know the sa password.

 

If someone got hold of the .bak file should I be concerned?

[vikpaw]

I wouldn't want to mention all the malicious ways it could be exploited.

Suffice to say, the storage location should be secured and they shouldn't be transported in an insecure way or over insecure channels.

If you're worried, zip it and password protect that. It makes sense to compress anyway.

[Michael]

The LEA create backups of SIMS/FMS and save them as a .bak file. This is then part of our backup set.

 

Question is whether that .bak is secured in anyway. i.e only useful if you know the sa password.

 

If someone got hold of the .bak file should I be concerned?

 

There are ways around it, so no, it's not secure. I suspect if you have remote backup that this will offer a form of encryption.

[snagrat]

Thanks just wanted clarification that it must be kept safe!

[ChrisMiles]

Almost certainly not. They are likely just SQL database backup files and can be restored to any database server by anyone who has a copy of the file. To secure them you should compress them with encryption using 7zip or similar or just keep them in a secure location.