Data Protection Flashcards
(56 cards)
What is the importance of data classification?
Helps allocate appropriate protection resources and prevents over-classification to avoid excessive costs
Requires proper policies to identify and classify data accurately
What type of data is classified as public?
No impact if released; often publicly accessible data
What defines sensitive data?
Minimal impact if released, e.g., financial data
What information is contained in private data?
Internal personnel or salary information
What does confidential data hold?
Trade secrets, intellectual property, source code, etc.
What characterizes critical data?
Extremely valuable and restricted information
Fill in the blank: Sensitive data has _______ impact if released.
minimal
True or False: Public data has a significant impact if released.
False
Fill in the blank: Critical data is characterized as extremely _______ and restricted information.
valuable
What is Data Ownership?
Process of identifying the individual responsible for maintaining the confidentiality, integrity, availability, and privacy of information assets
Data ownership is crucial for accountability in data management.
Who is a Data Owner?
A senior executive responsible for labeling information assets and ensuring they are protected with appropriate controls
Data owners play a critical role in establishing data protection policies.
What does a Data Controller do?
Entity responsible for determining data storage, collection, and usage purposes and methods, as well as ensuring the legality of these processes
Data controllers are key in compliance with data protection laws.
Define Data Processor.
A group or individual hired by the data controller to assist with tasks like data collection and processing
Data processors must operate under the instructions of the data controller.
What is the role of a Data Steward?
Focuses on data quality and metadata, ensuring data is appropriately labeled and classified, often working under the data owner
Data stewards help maintain data integrity and usability.
What responsibilities does a Data Custodian have?
Responsible for managing the systems on which data assets are stored, including enforcing access controls, encryption, and backup measures
Data custodians are essential for operational data security.
What does a Privacy Officer oversee?
Oversees privacy-related data, such as personally identifiable information (PII), sensitive personal information (SPI), or protected health information (PHI), ensuring compliance with legal and regulatory frameworks
Privacy officers are crucial for protecting individual privacy rights.
Who should be designated as Data Owners?
Data owners should be designated within their respective departments based on their knowledge of the data and its significance within the organization
Data owners are responsible for the management and oversight of data assets.
What does Full Disk Encryption (FDE) do?
Data At Rest
Encrypts the entire hard drive
FDE provides comprehensive data protection by encrypting all data on the disk.
What is the purpose of Partition Encryption?
Data At Rest
Encrypts specific partitions, leaving others unencrypted
Useful for protecting sensitive data while allowing access to other data.
What does File Encryption accomplish?
Data At Rest
Encrypts individual files
This method is ideal for securing specific documents or files.
What is the function of Volume Encryption?
Data At Rest
Encrypts selected files or directories
Allows for targeted encryption without affecting the entire disk.
What is Database Encryption?
Data At Rest
Encrypts data stored in a database at column, row, or table levels
Protects sensitive information within databases from unauthorized access.
What does Record Encryption do?
Data At Rest
Encrypts specific fields within a database record
This provides granular control over which data is protected.
What is the definition of Data at Rest?
Data stored in databases, file systems, or storage systems, not actively moving.
