SQL Server governance report — re-assessment

Prepared for Kauri Distribution Ltd (fictional sample) Estate 6 SQL Server instances Period 6 months of managed assurance Date December 2026 By SQLTriage + SQLDBA

Executive summary

Platinum

Remediation complete. The estate is now audit-defensible: backups are proven recoverable, access is least-privilege, customer PII is encrypted, and DR has been tested. Maintained continuously by the SQLTriage + SQLDBA managed assurance programme — the score below is now held, not chased.

Jun · Silver

Dec · Platinum

+30 points in six months · 0 critical or high findings open

Score by dimension (▲ change since initial assessment)

Backup & recoverability94 ▲56

Security & access91 ▲43

Compliance evidence95 ▲40

Configuration96 ▲25

Performance90 ▲11

What changed (the critical & high findings from June)

Status	Finding	Action taken
RESOLVED	Backups never restore-tested	Verified restore drills scheduled; CHECKSUM enabled across all 6 instances
RESOLVED	Excessive sysadmin membership	Cut from 9 to 2; service accounts moved to least-privilege roles
RESOLVED	Customer PII not encrypted at rest	TDE enabled with managed key rotation
RESOLVED	Unsupported SQL Server 2014 (PRD-02)	Migrated to a supported, patched version
RESOLVED	No proven disaster recovery	RPO/RTO documented; failover drill completed and passed
SCHEDULED	2 low-severity config items remain	Booked into next maintenance window

Programme at a glance

45/47

findings resolved

critical or high open

+30

governance points gained

low items scheduled

Compliance framework coverage (was 44–62% in June)

CIS Benchmark94%

NIST 800-5391%

SOC 290%

ISO 2700193%

PCI-DSS96%

HIPAA92%

+ 11 more frameworks mapped. The estate now produces audit-grade evidence on demand.

Produced by the SQLTriage engine, delivered by SQLDBA. The "after" picture of an ongoing managed assurance programme — pair it with the initial report to show clients the journey. 500+ checks · 20+ frameworks · ~60% of fixes safely auto-remediable (transactional, gated, audited) · 20,000+ assessments run · NZ-built.
Illustrative SAMPLE. "Kauri Distribution Ltd", all scores, findings and figures are fictional and for demonstration only — not a real client or assessment. Replace the logo placeholders before use.