Cloud Security Alliance VP: Database security boils down to these three things

Securing cloud databases boils down to three things, according to John Yeoh, global VP for research at Cloud Security Alliance (CSA). "Look at protecting the data itself, protecting the people who have access to it, and protecting how people access it — the networks and the applications that are giving access to your data," …

[Slipoch]

I think the basics should be common

The amount of times I have seen direct SQL commands with vars in the command (rather than as SQL variables) is ridiculous (I'm looking at you wordpress). One of the key factors to security is developing at the minimum level of competence which means not allowing sql injection attacks through use of sql vars.