Define the impact of information on the organization's mission;

Understand the replacement costs of information;

Determine who on the organization's intranet needs information and in what environment the information should be released

Know when data is no longer accurate or needed and should be destroyed

Data Ownership, Intellectual Property, Copyright

Business-related legal obligations and illegal obligations to ensure data compliance

Data security, anti-leakage control, data release, price, and dissemination related strategies

Before data is released, sign a memorandum and authorization agreement with users or customers to clarify the conditions for use.

Follow data policy and data ownership guidelines

Ensure access to appropriate users and maintain appropriate levels of data security

Basic data set maintenance, including but not limited to data storage and archiving

Documentation of data sets, including updates to documents

Ensure data quality and validation of data sets, including periodic audits to ensure data integrity

Project Manager, Data Manager, GIS Manager, IT Specialist, Database administrator, application developer, data collection or acquisition

1. Frequency of incorrect data recording

2. The Importance of Errors in Data Recording

Verification: Check whether it matches the source data, ensure accuracy, etc. Can often be performed by someone less familiar with the data

Validation: evaluate whether the data quality goals are met, and the reasons for any deviations that have occurred, usually by a professional

Make a data classification plan, involving various categories, including function, time, organization, etc.

Processing according to data sensitivity level

Develop a standard schema to make data easily retrieval.

Establish data index to facilitate query of archived data

IdentificationIdentification

PreservationSave

Collection

Processing

ReviewReview

AnalysisAnalysis

Production

PresentationSubmit

Media Destruction: Physically destroy media, Completely destroy storage media, the safest method

The disk is scrapped after degaussing

Tapes can be reused after degaussing

Encrypt credit card numbers and PII personally identifiable information when stored

Set strict data access policies for sensitive information

Set data rollback strategies to restore data to its previous state

Try to ensure that measures are in place during the acquisition phase rather than controlling afterward.

Users with different access levels can read and modify data.

The three CIA characteristics of protecting data at this stage are extremely challenging

Ensure operations that modify data are repeatable

Have automatic mechanisms to resolve inconsistencies (such as rollback mechanisms), Prevent data inconsistency caused by sudden power outage, etc.

Information is archived when it is no longer in routine use

Prevent data modification and unauthorized access from being discovered for long periods of time.

Backup data protection

Data retention period

A data backup is a copy of the currently used data set, Used to recover from loss of original data. Backing up data often becomes less useful as it gets older.

Data archives are copies of data sets that are no longer used, But when needed save it for future use. When data is archived, it is usually removed from its original location, This way the storage space is available for the data being used.

When the data is no longer used and it is properly destroyed.

Data is indeed destroyed

was destroyed correctly

If leaked, it could cause serious damage to national security.

New weapons blueprints • Spy satellite information, spy data

If leaked, it could cause serious damage to national security.

Force Deployment Plan: Force Readiness Information

For internal company use only

Data exempt from disclosure under the Freedom of Information Act or other laws and regulations

Unauthorized disclosures can severely impact a company.

Little secret. •If leaked, no serious damage may be caused.

Medical Data Test, Score Answers

The data is not sensitive or unclassified.

Computer Manuals and Warranty Information Job Postings

For internal company use only

Data exempt from disclosure under the Freedom of Information Act or other laws and regulations

Unauthorized disclosures can severely impact a company.

Trade secrets • Healthcare information • Programming code • Information to keep companies competitive

Personal information used within the company.

Unauthorized disclosure may adversely affect people or the company.

Work History•Human Resources Information•Medical Information

Special precautions are required to ensure the integrity and confidentiality of data and prevent unauthorized modification or deletion

Requires higher than ordinary guarantees of accuracy and completeness.

Example: Financial information • Project details, profit returns and forecasts

Disclosure is unwelcome but will not adversely affect the company or people.

CEOCEO

CFOChief Financial Officer

cIO chief information officer

CPOChief Privacy Officer

CSOChief Security Officer

Typically a manager, responsible for a specific business unit and ultimately responsible for protecting and using a specific subset of information.

The data owner has the responsibility of data due care, will therefore be responsible for any acts of negligence, Causing damage or leakage of data

Responsible for determining data classification

Responsible for ensuring necessary security controls are in place, Define security requirements for each classification and backup requirement,

Approve access to data

Deal with violations of data security policies

Assigned responsibility for routine maintenance Data Keeper of Data Protection Mechanism

Responsible for maintaining and protecting data.

Implement and maintain security controls;

Perform regular data backups;

Regularly verify data integrity;

Restore data from backup media;

record keeping activities;

Implement company safety policies, requirements of standards and guidelines, Relating to information security and data protection.

Responsible for one or more systems, each of which can hold and process data owned by different data owners.

Responsible for integrating security considerations into application and system procurement decisions and development projects.

Responsible for ensuring that necessary controls, password management, remote access controls, operating system configuration, etc. provide adequate security.

Ensure systems are properly assessed for vulnerabilities,

Report any systems to the incident response team and data owners.

Responsible for implementing and maintaining specific security network equipment and software within the enterprise.

Pay attention to distinguishing the responsibilities of security administrators and network administrators

The security administrator is responsible for creating new system user accounts, Implement new security software, Test security patches and components, and issue new passwords.

Security administrators must ensure that users are Access permissions support policy and data owner directives.

also called user manager

Ultimately responsible for all user activity and any assets created and owned by those users

Responsible for approving or denying requests to make changes to networks, systems or software.

Ensure that the change does not introduce any vulnerabilities, that it has been properly tested, and that it is implemented correctly.

Need to understand how changes impact security, interoperability, performance, and productivity.

Responsible for ensuring data is stored in a way that makes the most sense for the company and meets the job needs of those who need to access it

Make sure the architecture you build is consistent with your company's business goals.

Users must have the necessary level of access to the data.

Perform operational security procedures to ensure data confidentiality, integrity and availability

It’s about checking regularly that everyone is doing what they’re supposed to be doing, and ensuring that the correct controls are in place and are being maintained safely.

Malicious users may obtain sensitive information through physical or logical access to storage devices

Develop and test a data recovery plan

Removable devices and media must be encrypted, Including laptops, tablets, smartphones, and wearable devices

Choose appropriate encryption tools and algorithms, such as AES encryption

Create secure passwords

Use password and key management tools

Removable media should be labeled

Removable media should be kept in a secure location

Record the location of removable media and track it

Malicious users may intercept or monitor clear text data in transit

Confidential data must be encrypted when transmitted over any network, including transmission between intranets

When data can be accessed via the Web, a secure encryption protocol must be used, such as TLS1.2/1.3

Email transmission must use PGP or S/MIME. And encrypt the data through encryption software as an attachment

Non-Web data should use application-level encryption

When application-level encryption is not possible, IPsec encryption or SSH encryption should be used

Communication between applications and databases should be encrypted

Sensitive data transferred between devices should be encrypted

A set of technologies aimed at preventing the leakage of sensitive corporate information

Protect critical business data and intellectual property;

strengthen compliance;

Reduce the risk of data breach;

Increase training and awareness

Improve business processes;

Optimize disk space and network bandwidth;

Detect rogue/malware

Locate and catalog sensitive information stored across the enterprise;

Monitor and control the movement of sensitive information across the enterprise;

Monitor and control the movement of sensitive information from end-user systems;

Organizations often fail to recognize the type and location of information they process, When purchasing a DLP solution, you must first understand the types of sensitive data and inter-system and system-to-user data flow;

Classifications can include attributes categories, Such as private data, financial data and intellectual property, etc.;

Once the data has been appropriately identified and classified, Deeper analysis process to help with primary data and location of critical data paths;

You need to pay attention to the life cycle of enterprise data and understand data processing, Maintenance, storage and disposal can reveal deeper data storage and transmission paths;

Find and identify specific file types, Identify and record the location where information is stored;

Once found, DLP opens and identifies the contents of the file;

DLP uses crawler systems; crawlers

DLP solution

To monitor enterprise network data movement, DLP solutions use special network equipment or built-in technology to selectively capture and analyze network traffic;

Deep packet inspection (DPI) technology, as the core capability of DLP, DPI can read the packet payload content beyond the basic header information

DPI technology allows DLP to detect in-transit of data and determine content, source and destination;

DLP has the ability to handle encrypted data (e.g. with encryption keys), Or decrypt before detection and continue encryption after detection is completed;

Monitor data movement actions taken by end users on their workstations

Use Agent to complete tasks

watermark

Steganography is an information hiding technology that hides large amounts of information in pictures and video files;

Information hiding includes covert channels, hiding text on Web pages, hiding visible files, and empty passwords;

Focus on the key points of the security architecture through scope definition and tailoring methods

Flexibly apply various standards and baselines according to the needs of the enterprise