A database is only as safe as the people and applications allowed to touch it. Security & access control is how a DBA makes sure the right people can do their jobs while everyone else is kept out, and it is one of the first things an auditor or attacker will look at.
You'll start with the SQL Server security model: logins at the server level, users inside each database, and the permissions that control what they can do. From there you'll look at server, database, and application roles, which let you grant access to groups instead of individuals. The module then covers transparent data encryption (TDE), which protects data at rest, and finishes with SQL injection, one of the most common ways databases are attacked through the applications in front of them.
With access under control, you'll be ready for the next module, High Availability & Replication, where you keep the database running even when a server fails.
How to create users in SQL Server and assign permissions to them, using Windows authentication with Active Directory users and groups, with a brief look at SQL Server authentication.
An explanation of the fixed server roles, database roles, and application roles in SQL Server, and how they simplify managing permissions.
A walkthrough of setting up Transparent Data Encryption in SQL Server 2022 to protect a database's data at rest.
Dr Mike Pound demonstrates how an SQL injection attack works and just how much damage a vulnerable site can suffer.