As conventional Information Security solutions lay much stress on access control and authorization of only network or devices, the essential security issues are left unsolved. To safeguard corporate and personal data, we propose that "Security Assurance” is the ultimate solution to put all database assets and activities under management and to rebuild “Trust" within IT community through auditing and forensics.