Data Classification Flashcards
Who is the data owner ?
The data owner is the organisation that has collected or created the data. Normally assigned to an individual such as a department head. In the cloud the cloud customer is the data owner.
What duties does a data custodian perofrm ?
The data custodian is entrusted by the data owner to secure the data as well as daily administration and maintenance of the data.
What is the role of the data processor ?
The data processor is anybody who manipulates, copies, prints or destroys the data on behalf of the data owner
Who is ultimately responsible for data ?
Data owner
Does the data processor always have to have a direct link to the data owner ?
No
What are the stages of the data lifecycle ?
Create, Store, Use, Share, Archive, Destroy
What are the ways data can be categorised?
Functional Unit
Business Unit
Project
Regulatory
Who classifies the data and when is it done ?
Data Owner in create phase
What is data labelling ?
Labelling data from a security perspective makes sense by readily indicating the nature of certain information and how it should be handled and protected.
Common Labels are
Date of Creation
Date of scheduled destruction
Confidentiality
Handling directions
Dissemination
Source
Jurisdiction
Applicable Regulation
What is Data Discovery
Data Discovery relates to several techniques that an organisation utilizes to get a handle on its data architecture for either an investigation or creating an initial inventory.
What are the three main types of data discovery ?
Labels, Content and Metadata
Name four ways to categorise data ?
Regulatory, Business Function, Functional Unit, Project
Name three ways to classify data ?
Sensitivity, Jurisdiction, Criticality
Give examples of some common data labels ?
Date of Creation
Date of Destruction
Confidentiality Level
Handling Directions
Disesemination
Access Limitation
Source
Jurisdiction
Applicable Regulation
Name five data discovery methods ?
Label, Metadata, Content, Structure, Analytics
What are the jurisdictional requirements of Asia ?
Data privacy differs greatly between countries - Japan adheres to EU model as does Singapore China on the other had demands that all IT traffic and communications be accessible to the Chineses Government.
What are the jurisdictional requirements of South and Central America ?
Most countries lack privacy protection frameworks except Argentina which has Personal Data Protection Act
What are the jurisdictional requirements of Australia and New Zealand ?
Strong Privacy and Protection that maps to EU GDPR
What are the jurisdictional requirements of Europe ?
Strong Personal Privacy info protection covered by GDPR
What are the jurisdictional requirements of Usa ?
There is no singular, overarching federal privacy statute instead it tends to be industry led (HIPAA, GLBA) or contractual obligations such as PCI.
What is copyright ?
The protection for the legal expression of ideas is copyright. It does not cover specific words, slogans, recipes or formulae.
The duration of copyright vary based on the terms under which they were created depending on if an individual created the work themselves or if the work was created under contract. Typically copyright lasts either for 70 years after the authors death or 120 after the first publication of work created under contract.
Copyright gives the creator
Perform the work publicly
Profit from the work
Make copies
Make derivative copies
Import or Expor
Broadcast
Sell or otherwise assign the rights.
Copyright infingement is usually dealt with as a civil case.
Normally it is the creator who owns the copyright but in some US states its the person who first registers it.
What are trademarks ?
Applied to specific words and graphics - they are representation of organisation and its brand
US Patent and Trademark Office registers them (USPTO) - r or tm symbol
Infringement is actionable and lasts in perpetuity
What are Patents
Protects invention, materials etc - Typically last for 20 years from the time of patent application
World Intellectual Property Office (WIPO) global
What are trade secrets ?
food formulaes, commercial methods or aggregations of information. Trade Secrets must be kept secret to have protection lasts in perpetuity but if competitor discovers the secret they are not liable.
