Keeping info from posts like this in mind:

What does BES see; what can be tracked/logged?


How sensitive would you consider the data stored in the DB for your users? My InfoSec group says I have large amounts of sensitive data in my BESmgmt DB and we now need to a special review. We use dedicated SQL servers for this task that are locked down by our SQL DBAs just for BES use. I wonder what they have up their sleeve now.

I'd be curious to know what they are basing their opinion on.

The BESMgmt database doesn't contain copies of emails, contacts, etc. That information is all stored in the mail server (Exchange, etc).

__________________
You may know me as Juwaack68

Joolie is right on the money. On average the database only holds about 1MB of data per user. Your InfoSec dpt need to pull their heads out of their...& do some research before jumping to conclusions.

The only thing I can think of that they could possibly be concerned with is the encryption keys stored in the database. But these are read only & regenerated by the BlackBerry devices every 30 days.