I have been asked to identify all tables and columns with sensitive data
such as social security numbers and the like. Our business analyst
quickly provided a report but I fear it represents the expected use of
the systems not actual use. For example, I already discovered some very
sensitive data in a description field which the analyst didn't expect,
although he wasn't surprised.



I have about nine hundred tables from about nine gigabytes of data
files.



I thought about a bulk copy batch to character format where I could run
some Perl regular expression searches against everything, but it would
be a nightmare to map the findings back to the table's columns. I
can't imagine I'm the first one to need to do this yet my internet
search reveals only tools for documents and not SQL Server tables.
Does anyone have experience or ideas?



Thanks!

John




--
DISCLAIMER

Confidentiality Note: This e-mail is intended only for the person or entity to
which it is addressed and may contain information that is privileged,
confidential or otherwise protected from disclosure. Dissemination,
distribution or copying of this e-mail or the information herein by anyone
other than the intended recipient, or an employee or agent responsible for
delivering the message to the intended recipient, is prohibited. If you have
received this e-mail in error, please notify us immediately (telephone
415-288-0544 or e-mail [Email address protected] and destroy the original
message and all copies.

Hall Capital Partners LLC reserves the right to monitor and review the content
of all e-mail communications sent and/or received by its employees.


MS Sql Server LazyDBA home page