Guardian One Portal · SQL Server Estate
All four roles read the same retained assessment evidence. Counts are point-in-time and unavailable evidence is not treated as a pass.
Average assessed health is 79/100 across 7 scored instance(s). An average is a poor lead for this audience: it is high while a minority of the estate is failing, and the count is what the decision is taken on.
Decision: confirm accountable owners, priority and investment.
52 stored control result(s), including 0 not assessed and 0 approved exception(s).
Decision: validate scope, exceptions, evidence period and review sign-off.
Latest retained history records 0 high, 0 medium and 0 low finding(s) across 7 instance(s): patching, backups, capacity and instance configuration.
Action: work the instance evidence, and retain test and rollback results.
Schema, index and query evidence sits in each instance’s own assessment report, per database. Estate pages carry the instance; the report carries the database.
Action: open the report for a database before changing its design.
Each answer counts instances, not checks: one check failing on ten servers is ten visits, ten checks failing on one server is one.
Estate assurance
3 of 7instances need attention
Evidence as at 2026-07-28 09:00. Health scores run from 55 to 94, averaging 79/100. Evidence that could not be collected is not treated as a pass.
Also in the latest assessment: no high or medium findings, no approved exceptions in force, nothing left unassessed.
Switch between the one-row-per-instance summary and the stored compliance controls for every SQL Server. Click a chart above to filter both tables; combine a SQL Server version and a compliance status together to narrow further.
| GO-DEMO-SQL01Enterprise Edition | SQL Server 2022 | 2026-07-28 09:00 | 94/100 | Production | — | 1,132,000 MB free of 1,920,000 MB | 2 | |
GO-DEMO-SQL01 assessment history
| ||||||||
| GO-DEMO-SQL02\ERPEnterprise Edition | SQL Server 2019 | 2026-07-28 09:00 | 91/100 | Production | — | 608,000 MB free of 2,176,000 MB | 2 | |
GO-DEMO-SQL02\ERP assessment history
| ||||||||
| GO-DEMO-SQL02\REPORTINGStandard Edition | SQL Server 2017 | 2026-07-28 09:00 | 93/100 | Production | — | 660,000 MB free of 1,600,000 MB | 2 | |
GO-DEMO-SQL02\REPORTING assessment history
| ||||||||
| GO-DEMO-SQL03\WAREHOUSEEnterprise Edition | SQL Server 2025 | 2026-07-28 09:00 | 69/100 | Production | — | 1,981,000 MB free of 9,216,000 MB | 3 | |
GO-DEMO-SQL03\WAREHOUSE assessment history
| ||||||||
| GO-DEMO-SQL04\DEVDeveloper Edition | SQL Server 2016 | 2026-07-28 09:00 | 66/100 | Development | — | 201,000 MB free of 704,000 MB | 6 | |
GO-DEMO-SQL04\DEV assessment history
| ||||||||
| GO-DEMO-SQL04\TESTDeveloper Edition | SQL Server 2014 | 2026-07-28 09:00 | 88/100 | Test | — | 220,000 MB free of 704,000 MB | 3 | |
GO-DEMO-SQL04\TEST assessment history
| ||||||||
| GO-DEMO-SQL05\LEGACYStandard Edition | SQL Server 2012 | 2026-07-28 09:00 | 55/100 | Production | — | 61,000 MB free of 704,000 MB | 4 | |
GO-DEMO-SQL05\LEGACY assessment history
| ||||||||
| Last assessed | SQL Server instance | Overall compliance | SQL Server Browser disabled | xp_cmdshell disabled |
|---|---|---|---|---|
| 2026-07-28 09:00 | GO-DEMO-SQL01SQL Server 2022 | Pass | Pass | Pass |
| 2026-07-28 09:00 | GO-DEMO-SQL02\ERPSQL Server 2019 | Review required | Pass | Pass |
| 2026-07-28 09:00 | GO-DEMO-SQL02\REPORTINGSQL Server 2017 | Pass | Pass | Pass |
| 2026-07-28 09:00 | GO-DEMO-SQL03\WAREHOUSESQL Server 2025 | Needs attention | Pass | Pass |
| 2026-07-28 09:00 | GO-DEMO-SQL04\DEVSQL Server 2016 | Needs attention | Pass | Pass |
| 2026-07-28 09:00 | GO-DEMO-SQL04\TESTSQL Server 2014 | Pass | Pass | Pass |
| 2026-07-28 09:00 | GO-DEMO-SQL05\LEGACYSQL Server 2012 | Needs attention | Needs attention | Pass |
A check failing on several instances is one decision, not several.
| Last assessed | SQL Server instance | Severity | Category | Finding | Risk | Recommended action |
|---|---|---|---|---|---|---|
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | High | Backup | No full backup recorded for Warehouse_App01 in 34 days | A failure now would lose more than a month of work. The recovery model is FULL, so the log is growing and will not truncate until a backup runs. | Confirm the backup job is scheduled and enabled, then run a full backup and a governed restore test before closing this. |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | High | Patching | SQL Server 2012 is outside Microsoft's support lifecycle | No security fixes are issued for this version. Any vulnerability found from now on stays open. | Plan migration to a supported release, or record the accepted risk and the compensating controls with a review date. |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | Medium | Configuration | Max server memory is unset on an instance with 24 GB | SQL Server will take memory the operating system needs, which shows as unexplained slowness on the whole machine rather than in the engine. | Set max server memory, leaving headroom for Windows and any other service on the host. |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | Medium | Index design | Foreign key has no supporting leading index on Dev_App03 | Referential checks scan more data than necessary, and the cost grows with the table. | Validate the workload and the proposed key order in a representative environment before creating the index. |
| 28 Jul 202609:00 | GO-DEMO-SQL01 | Low | Configuration | Backup compression is off by default | Backups take longer and occupy more space than they need to. Not a fault, and worth a decision. | Turn on backup compression unless a storage appliance is already deduplicating the files. |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | Unclassified | Query Store | Query Store capture mode is AUTO with 384 MB used of 2048 MB | Recorded without a severity: whether this matters depends on the workload's retention needs, which an assessment cannot observe. | Review the retention window against how far back a performance question is usually asked. |
| Last assessed | SQL Server instance | Edition | Build | Product level | Servicing updates | Build currency | Support lifecycle |
|---|---|---|---|---|---|---|---|
| 28 Jul 202609:00 | GO-DEMO-SQL01 | Enterprise Edition | 16.0.4265.3 | Not recorded | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | Enterprise Edition | 15.0.4430.1 | Not recorded | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | Standard Edition | 14.0.3456.2 | Not recorded | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | Enterprise Edition | 17.0.4065.4 | Not recorded | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | Developer Edition | 13.0.6300.2 | Not recorded | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | Developer Edition | 12.0.6024.0 | Not recorded | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | Standard Edition | 11.0.7001.0 | Not recorded | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. | Not collectedThis control was not in the stored assessment. |
| Last assessed | SQL Server instance | Service account type | Min server memory (MB) | Max server memory (MB) | Max worker threads | Cost threshold for parallelism | MAXDOP | Backup compression default | xp_cmdshell | Startup trace flags | Startup parameters | Port |
|---|---|---|---|---|---|---|---|---|---|---|---|---|
| 28 Jul 202609:00 | GO-DEMO-SQL01 | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Pass | Not collected | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Pass | Not collected | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Pass | Not collected | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Pass | Not collected | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Pass | Not collected | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Pass | Not collected | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Not collected | Pass | Not collected | Not collected | Not collected |
| Last assessed | SQL Server instance | Database | Type | State | Recovery model | Compatibility level | Compatibility vs engine | Size | Access | Auto-shrink |
|---|---|---|---|---|---|---|---|---|---|---|
| 28 Jul 202609:00 | GO-DEMO-SQL01 | master | System | ONLINE | SIMPLE | 160 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL01 | model | System | ONLINE | FULL | 160 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL01 | msdb | System | ONLINE | SIMPLE | 160 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL01 | tempdb | System | ONLINE | SIMPLE | 160 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL01 | Mssqlserver_App01 | User | ONLINE | FULL | 150 | Behind engine (150 vs 160) | 2,048 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL01 | Mssqlserver_App02 | User | ONLINE | FULL | 160 | Matches engine | 3,072 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | master | System | ONLINE | SIMPLE | 150 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | model | System | ONLINE | FULL | 150 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | msdb | System | ONLINE | SIMPLE | 150 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | tempdb | System | ONLINE | SIMPLE | 150 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | Erp_App01 | User | ONLINE | FULL | 140 | Behind engine (140 vs 150) | 2,048 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | Erp_App02 | User | ONLINE | FULL | 150 | Matches engine | 3,072 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | master | System | ONLINE | SIMPLE | 140 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | model | System | ONLINE | FULL | 140 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | msdb | System | ONLINE | SIMPLE | 140 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | tempdb | System | ONLINE | SIMPLE | 140 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | Reporting_App01 | User | ONLINE | FULL | 130 | Behind engine (130 vs 140) | 2,048 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | Reporting_App02 | User | ONLINE | FULL | 140 | Matches engine | 3,072 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | master | System | ONLINE | SIMPLE | 170 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | model | System | ONLINE | FULL | 170 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | msdb | System | ONLINE | SIMPLE | 170 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | tempdb | System | ONLINE | SIMPLE | 170 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | Warehouse_App01 | User | ONLINE | FULL | 160 | Behind engine (160 vs 170) | 2,048 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | Warehouse_App02 | User | RESTORING | FULL | 170 | Matches engine | 3,072 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | Warehouse_App03 | User | ONLINE | SIMPLE | 170 | Matches engine | 4,096 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | master | System | ONLINE | SIMPLE | 130 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | model | System | ONLINE | FULL | 130 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | msdb | System | ONLINE | SIMPLE | 130 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | tempdb | System | ONLINE | SIMPLE | 130 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | Dev_App01 | User | ONLINE | FULL | 120 | Behind engine (120 vs 130) | 2,048 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | Dev_App02 | User | ONLINE | FULL | 130 | Matches engine | 3,072 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | Dev_App03 | User | ONLINE | SIMPLE | 130 | Matches engine | 4,096 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | Dev_App04 | User | ONLINE | FULL | 130 | Matches engine | 5,120 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | Dev_App05 | User | ONLINE | FULL | 130 | Matches engine | 6,144 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | Dev_App06 | User | ONLINE | SIMPLE | 130 | Matches engine | 7,168 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | master | System | ONLINE | SIMPLE | 120 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | model | System | ONLINE | FULL | 120 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | msdb | System | ONLINE | SIMPLE | 120 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | tempdb | System | ONLINE | SIMPLE | 120 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | Test_App01 | User | ONLINE | FULL | 110 | Behind engine (110 vs 120) | 2,048 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | Test_App02 | User | ONLINE | FULL | 120 | Matches engine | 3,072 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | Test_App03 | User | ONLINE | SIMPLE | 120 | Matches engine | 4,096 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | master | System | ONLINE | SIMPLE | 110 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | model | System | ONLINE | FULL | 110 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | msdb | System | ONLINE | SIMPLE | 110 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | tempdb | System | ONLINE | SIMPLE | 110 | Matches engine | Not measured | Not collected | Not collected |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | Legacy_App01 | User | OFFLINE | FULL | 100 | Behind engine (100 vs 110) | 2,048 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | Legacy_App02 | User | ONLINE | FULL | 110 | Matches engine | 3,072 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | Legacy_App03 | User | ONLINE | SIMPLE | 110 | Matches engine | 4,096 MB | Read write | Off |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | Legacy_App04 | User | ONLINE | FULL | 110 | Matches engine | 5,120 MB | Read write | Off |
| Last assessed | SQL Server instance | Database | Recovery model | Last full backup | Last differential | Last log backup |
|---|---|---|---|---|---|---|
| No backup evidence has been collected. | ||||||
Edition, version, sockets and cores as measured on each instance. Guardian One does not count licences or state compliance with an agreement: the count depends on the licensing model, the edition's own rules and any virtualisation, none of which are visible from a database engine. Where the Windows host could not be reached the processor figures read "Not collected" rather than zero.
| Last assessed | SQL Server instance | Edition | Version | CPU sockets | CPU cores | Operating system |
|---|---|---|---|---|---|---|
| 28 Jul 202609:00 | GO-DEMO-SQL01 | Enterprise Edition | 16.0.4265.3 | 2 | 16 | Windows Server 2022 Datacenter |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | Enterprise Edition | 15.0.4430.1 | 2 | 24 | Windows Server 2019 Standard |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | Standard Edition | 14.0.3456.2 | 2 | 24 | Windows Server 2019 Standard |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | Enterprise Edition | 17.0.4065.4 | 4 | 32 | Windows Server 2022 Datacenter |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | Developer Edition | 13.0.6300.2 | 1 | 8 | Windows Server 2019 Standard |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | Developer Edition | 12.0.6024.0 | 1 | 8 | Windows Server 2019 Standard |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | Standard Edition | 11.0.7001.0 | Not collected | Not collected | Not collected |
| SQL Server instance | Baseline | Run | Stamped | By | Status | Reason |
|---|---|---|---|---|---|---|
| No baseline has been stamped for any instance. A baseline is agreed in the Guardian One Baselines window on the desktop; this page shows the record and does not create it. | ||||||
What the instance is set to, rather than how it scores. Neither answer here is automatically a fault: mixed-mode authentication and a running Browser service are both supported configurations, and where they are required the approved position is recorded as a compliance exception.
| Last assessed | SQL Server instance | SQL Server authentication mode | SQL Server Browser service disabled |
|---|---|---|---|
| 2026-07-28 09:00 | GO-DEMO-SQL01SQL Server 2022 | PassWindows authentication only | PassService not present |
| 2026-07-28 09:00 | GO-DEMO-SQL02\ERPSQL Server 2019 | Review requiredMixed mode | Review requiredRunning |
| 2026-07-28 09:00 | GO-DEMO-SQL02\REPORTINGSQL Server 2017 | PassWindows authentication only | PassStopped |
| 2026-07-28 09:00 | GO-DEMO-SQL03\WAREHOUSESQL Server 2025 | Review requiredMixed mode | Review requiredRunning |
| 2026-07-28 09:00 | GO-DEMO-SQL04\DEVSQL Server 2016 | Review requiredMixed mode | Review requiredRunning |
| 2026-07-28 09:00 | GO-DEMO-SQL04\TESTSQL Server 2014 | PassWindows authentication only | PassStopped |
| 2026-07-28 09:00 | GO-DEMO-SQL05\LEGACYSQL Server 2012 | Review requiredMixed mode | Review requiredRunning |
| Last assessed | SQL Server instance | Scope | Audit | State | Destination | On failure | What is captured |
|---|---|---|---|---|---|---|---|
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | Server | GuardianOne-ServerAuditFailed logins and permission changes | Enabled | D:\SQLAudit\ERP | Continue | Records failed logins, server role changes and permission grants. |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | Server | GuardianOne-ServerAudit | Enabled, not running | D:\SQLAudit\Reporting | Continue | The audit exists and is not running, so nothing is being recorded. |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | Database | Legacy-DatabaseAuditSELECT and EXECUTE on Legacy_App01 | Enabled | Application log | Shut down server | Shut down on failure stops the instance if the audit cannot be written. That is a deliberate choice and it should be a recorded one. |
| Last assessed | SQL Server instance | Scope | Encryption | State | Algorithm | Certificate expiry | Detail |
|---|---|---|---|---|---|---|---|
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | ERP_App01 | Transparent data encryption | On | AES 256-bit | — | Database encrypted at rest. The certificate protecting the database encryption key is held in master and is backed up separately. |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | Reporting_App01 | Always Encrypted | On | AEAD_AES_256_CBC_HMAC_SHA_256 | — | Two columns carry deterministic encryption; the keys are held by the application and are never available to the engine. |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | Warehouse_App01 | Transparent data encryption | Off | — | — | Not encrypted at rest. This database carries columns classified as health data. |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | Instance | Backup encryption | Off | — | — | Backups are written unencrypted. A backup file is readable wherever it is copied, which is the point at which most estates lose data. |
These are conditions of the instance rather than the mandate it is judged against. Patching currency has its own tab, and the engine service identity is a configuration choice; both were making a server read as non-compliant for being a version behind.
| Last assessed | SQL Server instance | Overall compliance | Auto-shrink disabled | Managed service identity | Recovery evidence current | Storage capacity within threshold | Supported SQL Server release |
|---|---|---|---|---|---|---|---|
| 2026-07-28 09:00 | GO-DEMO-SQL01SQL Server 2022 | Pass | Not assessed | Pass | Pass | Pass | Not assessed |
| 2026-07-28 09:00 | GO-DEMO-SQL02\ERPSQL Server 2019 | Review required | Not assessed | Pass | Pass | Pass | Not assessed |
| 2026-07-28 09:00 | GO-DEMO-SQL02\REPORTINGSQL Server 2017 | Pass | Not assessed | Pass | Pass | Pass | Not assessed |
| 2026-07-28 09:00 | GO-DEMO-SQL03\WAREHOUSESQL Server 2025 | Needs attention | Needs attention | Pass | Pass | Needs attention | Not assessed |
| 2026-07-28 09:00 | GO-DEMO-SQL04\DEVSQL Server 2016 | Needs attention | Not assessed | Needs attention | Pass | Pass | Not assessed |
| 2026-07-28 09:00 | GO-DEMO-SQL04\TESTSQL Server 2014 | Pass | Not assessed | Pass | Pass | Pass | Not assessed |
| 2026-07-28 09:00 | GO-DEMO-SQL05\LEGACYSQL Server 2012 | Needs attention | Not assessed | Pass | Pass | Pass | Needs attention |
Not compared. GO-DEMO-SQL05\LEGACY: only one completed assessment, so there is nothing to compare it with.
| Last assessed | SQL Server instance | Topic | Control | Previous | Current | Change | Recommendation |
|---|---|---|---|---|---|---|---|
| 28 Jul 202609:00 | GO-DEMO-SQL01baseline · run 470 · 28 Apr 2026 | Access governance | Managed service identity | Not assessed | Pass | Now passing | Run the SQL Server service under a managed service account so its password is rotated by the directory rather than by hand. |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERPbaseline · run 380 · 31 Mar 2026 | Data governance | Storage capacity within threshold | Needs attention | Pass | Resolved | Add capacity or reclaim space before free space reaches the agreed floor; growth stopping mid-transaction is the expensive outcome. |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSEbaseline · run 320 · 31 Mar 2026 | Data governance | Storage capacity within threshold | Pass | Needs attention | Regressed | Add capacity or reclaim space before free space reaches the agreed floor; growth stopping mid-transaction is the expensive outcome. |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEVbaseline · run 644 · 30 Jun 2026 | Access governance | Managed service identity | Approved exception | Needs attention | Regressed | Run the SQL Server service under a managed service account so its password is rotated by the directory rather than by hand. |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TESTbaseline · run 354 · 31 Mar 2026 | Data governance | Recovery evidence current | Needs attention | Pass | Resolved | Confirm a recent successful backup and a tested restore for every database whose loss would matter. |
What Guardian One identified as sensitive, by database. Guardian One never reads the contents of a column: this is built from the catalogue and from SQL Server's own sensitivity labels, so it names what is there and never what it holds. Counts and categories only. Column names are part of classification detail, which Compliance and Quantum subscriptions receive - a column name is itself a disclosure of what the database holds.
| Last assessed | SQL Server instance | Environment | Database | Labelled columns | Inferred columns | Categories | Protection |
|---|---|---|---|---|---|---|---|
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | Production | ERP_App01 | 14 | 3 | Labelled: Personal, Financial Inferred: Cardholder data | UnprotectedNo transparent data encryption and no encrypted column |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | Production | ERP_App02 | 2 | 0 | Labelled: Personal | ProtectedTransparent data encryption |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | Production | Reporting_App01 | 0 | 6 | Inferred: Personal | Protected2 encrypted column(s) |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | Production | Warehouse_App01 | 9 | 0 | Labelled: Health | UnprotectedNo transparent data encryption and no encrypted column |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | Test | Test_App01 | 0 | 0 | None identified | Protected0 encrypted column(s) |
Could not be read, so these are absent from the table rather than clear: GO-DEMO-SQL03\WAREHOUSE / Warehouse_Archive.
Whether each machine matches the template its name classifies it into, and where it deviates. A template states the drives and mount points expected of a machine of that kind; deviations are differences from that expectation, not faults in their own right.
| Last assessed | SQL Server instance | Machine | Environment | Machine template | Conformance | Deviations |
|---|---|---|---|---|---|---|
| 28 Jul 202609:00 | GO-DEMO-SQL01 | Not recorded | Production | None matched | Not assessed | No deviation recorded |
| 28 Jul 202609:00 | GO-DEMO-SQL02\ERP | Not recorded | Production | None matched | Not assessed | No deviation recorded |
| 28 Jul 202609:00 | GO-DEMO-SQL02\REPORTING | Not recorded | Production | None matched | Not assessed | No deviation recorded |
| 28 Jul 202609:00 | GO-DEMO-SQL03\WAREHOUSE | Not recorded | Production | None matched | Not assessed | No deviation recorded |
| 28 Jul 202609:00 | GO-DEMO-SQL04\DEV | Not recorded | Development | None matched | Not assessed | No deviation recorded |
| 28 Jul 202609:00 | GO-DEMO-SQL04\TEST | Not recorded | Test | None matched | Not assessed | No deviation recorded |
| 28 Jul 202609:00 | GO-DEMO-SQL05\LEGACY | Not recorded | Production | None matched | Not assessed | No deviation recorded |
