First, there is no such thing as absolute security. You control what you can.

Even in a mom and pop, you can restrict who can logon to the server. You can restrict who can browse folders.

Authorize who can do backups and have rules in place about how to handle the media. Are they storing it offsite? You can throw it in the car and store it at home.

>SQL Server DB security
>
>What about backup DVD's, tapes ...
>It's a mom-and-pop kind of place. Everyone
>has access to the server.
>
>If protected by a reasonably obscure password,
>how hard is it to get at the data, if you
>have backup media in your hands?
>
>In this instance, I'm probably paranoid, but I
>work in an Accounting role, and we like to set
>things up so it's hard to do the wrong thing.