Businesses must comply with data protection regulations, but database security is often left out of the equation for one simple reason: to monitor database activity, auditing must be enabled and many administrators will not do this due to serious concerns about performance.