Auditing Information Systems, Second Edition

1.4. DATABASE MANAGEMENT SYSTEMS

A database management system (DBMS) typically consists of a suite of programs that are used to define, query, secure, and generally manage large volumes of data. Having data located in a separate DBMS offers several benefits, including the flexibility to change applications without affecting the data, the ability to eliminate data redundancy formerly required by nonopen applications, and the ability to better secure and monitor the data.

Some applications perform tasks that do not require a DBMS. For example, an application that specifically controls the raising and lowering of cooling rods in a nuclear power plant does not need a database. However, data about the raising and lowering needs to be recorded, monitored, and analyzed, most likely by another application. Depending on the amount and complexity of data being recorded, a DBMS may be necessary.

In fact, a majority of complex computing applications have some sort of DBMS associated with them. In some cases, applications are written to function with a specific DBMS and to rely solely on the DBMS to implement security. In other cases, applications are written to function with a variety of different DBMSs and have security features within the application software as well as the DBMSs. Examples of common DBMSs include Microsoft SQL Server, Oracle, and IBM DB2.