question

The first, and most important aspect, is making sure that you have security set up appropriately. That people have the least possible permissions within the system. That should prevent random users from getting access to things that they shouldn't have. You'll also want to make sure specifically that you control who can run backups. As far as backups go, you can use [encryption within the system][1] which will require security to restore the database. You can also look to third party backup tools to help with that. But the most important is ensuring that you have security set up appropriately on the system in the first place. [1]: https://msdn.microsoft.com/en-us/library/bb964742.aspx