SQL Server health, risk & compliance — governance report

Prepared for Kauri Distribution Ltd (fictional sample) Estate 6 SQL Server instances Assessment 500+ checks · 20+ frameworks Date June 2026 By SQLTriage + SQLDBA

Executive summary

Silver

This estate is materially exposed: backups are taken but not proven recoverable, access is over-privileged, and audit evidence is incomplete. None of it is unusual — and all of it is fixable. With a focused remediation programme, Platinum is achievable in ~6 months.

Bronze 0–40

Silver 41–70

Gold 71–90

Platinum 91–100

▲ You are here: Silver 63 · Target: Platinum 91+

Score by dimension

Backup & recoverability38 · at risk

Security & access48 · weak

Compliance evidence55 · partial

Configuration71 · good

Performance79 · good

Top findings (6 of 47 shown · highest severity first)

Severity	Finding	Maps to	Remediation
CRITICAL	Backups taken but never restore-tested — 4 of 6 instances. A backup nobody has restored is not a safety net.	NIST CP-9 · SOC 2 A1.2	Inspected script
CRITICAL	Excessive sysadmin membership — 9 logins hold sysadmin, incl. 3 shared service accounts. No least-privilege.	NIST AC-6 · ISO A.8.2 · CIS 4	Inspected script
HIGH	Customer PII database not encrypted at rest — TDE disabled on the orders/customer database.	PCI-DSS 3.4 · ISO A.8.24	Inspected script
HIGH	Unsupported SQL Server 2014 in production (PRD-02) — out of support, carrying known unpatched issues.	NIST SI-2	Upgrade plan
MEDIUM	No proven disaster recovery — RPO/RTO undocumented; no failover test on record.	ISO A.5.30 · SOC 2 A1.3	Inspected script
MEDIUM	Configuration drift — MAXDOP, cost-threshold and tempdb file count off best practice across 5 instances.	CIS config	Safe auto-fix

Remediation at a glance

findings identified

safe to auto-fix now

~96 hrs

effort to Platinum

instances assessed

Compliance framework coverage

CIS Benchmark58%

NIST 800-5362%

SOC 251%

ISO 2700160%

PCI-DSS44%

HIPAA57%

+ 11 more frameworks mapped in the full report. Every finding above is cross-referenced to the controls it satisfies.

Produced by the SQLTriage engine, delivered by SQLDBA. 500+ checks · 17 compliance frameworks · ~60% of fixes safely auto-remediable (transactional, gated, audited) · 20,000+ assessments run · NZ-built. The free 15-minute health check produces this report on one of your instances — no install, no obligation.
This is an illustrative SAMPLE. "Kauri Distribution Ltd", all scores, findings and figures are fictional and for demonstration only — not a real client or assessment. Replace the wordmark placeholders with the SQLTriage and SQLDBA marks before use.