First is to implement strong access control by making sure that those who have access to the database have it on a need to know or to do bases and also implement access to information on a least privilege basis.