PASS 2010 Member Survey Reports Database Security Benchmark Results

Members share insight on their organizations’security practices; study distills results of 761 respondents

SEATTLE, WA — November 10, 2010 — The Professional Association for SQL Server (PASS) has released its 2010 Database Security report, “Data in the Dark: Organizational Disconnect Hampers Information Security” during PASS Summit 2010. PASS members were polled in September and given the opportunity to share insight on their organizations’ security practices and level of preparedness for database security breaches. The survey was conducted by Unisphere Research and sponsored by Application Security Inc.
Study statistics reveal that companies’ data security is hampered by disconnect within the organization. Approximately 75% of respondents, the majority of whom are database administrators, are responsible for protecting their organization’s database. Nearly half of the study’s respondents said that a database breach would have greater impact on organizational security than any other IT component. Additionally, one in five respondents fear that their organizations will experience a major data breach over the coming months, many report few controls are in place to protect personal data, and that they don’t have or aren’t aware if security audits are in place to meet more rigorous standards.

“This study is the first of many new survey analyses we hope to bring to the PASS community,” said Rushabh Mehta, PASS President. “With up-to-date trend analysis information at their fingertips, PASS members are able to better evaluate and compare their own company’s database security practices to other organizations.”

Based on responses from 761 Microsoft SQL Server professionals, the publication, "Data in the Dark" distills the survey results with key highlights and detailed analysis. To download a copy of the report “Data in the Dark: Organizational Disconnect Hampers Information Security,” please visit

PASS Summit, the largest SQL Server educational and networking event in the world runs through November 11. For more information and the latest updates from PASS Summit 2010, see

About PASS
The Professional Association for SQL Server (PASS) is an independent, not-for-profit association dedicated to supporting, educating, and promoting the Microsoft SQL Server community. From local user groups and virtual chapters to webcasts and the annual PASS Summit, PASS enables knowledge sharing, in-depth learning, access to the Microsoft SQL Server team, and the ability to influence the direction of SQL Server technologies. For more information about PASS and the benefits of becoming a member, visit the PASS Web site at

All brand names, product names, and trademarks belong to their respective holders.

Media Contact:
Alison MacDonald