Patent ID: 8095962

Claim:
A method of auditing databases for security compliance, the method comprising: querying databases in batch operation with signals emitted from a remotely located central security server for database security parameters associated with the databases such that the databases are queried without being individually selected by a user to be queried, wherein the database security parameters associated with each database define rules for user identifications and user passwords to be used by users to access the database, wherein the databases are queried for different database security parameters such that the queried database security parameters associated with at least one of the databases is different than the queried database security parameters associated with at least one of the other databases; wherein querying databases further includes automatically querying a database with a signal emitted from the central security server for database security parameters associated with the database in response to a user changing at least one of the user identification and the user password used by the user to access the database; determining authorized database security parameters for each queried database security parameter; for each database, auditing at the central security server the queried database security parameters associated with the database for compliance with the authorized security parameters; for each database, determining each queried database security parameter associated with the database as being a noncompliant security parameter if the queried database security parameter associated with the database fails to comply with the authorized database security parameters; and compiling a security report of databases having noncompliant security parameters.