8.Restrict permissions on the directory to which the database is installed
Make sure that permission s are not given to everyone
9.Restrict permissions on the registry keys used by the database
Review the security permissions through the Registry Editor
Review to ensure that no excessive permissions exist
10.Check for default usernames and passwords
Verify that all usernames and passwords have been removed or locked, or the passwords have been changed