A secure DB configuration incorporates measures to ensure physical and logical database security and includes use of web application and database firewalls, database hardening to the fullest extent possible, data encryption, access management, active monitoring and minimizing value of the database.