Data Security - Revision history

User at 12:01, 24 February 2024

2024-02-24T12:01:31Z

User at 21:53, 22 February 2024

2024-02-22T21:53:00Z

User at 17:58, 14 April 2023

2023-04-14T17:58:31Z

Show changes

User at 17:46, 12 January 2023

2023-01-12T17:46:46Z

User at 17:45, 12 January 2023

2023-01-12T17:45:47Z

Show changes

User at 15:35, 26 October 2022

2022-10-26T15:35:27Z

User: The LinkTitles extension automatically added links to existing pages (https://github.com/bovender/LinkTitles).

2021-02-06T15:13:18Z

The LinkTitles extension automatically added links to existing pages (https://github.com/bovender/LinkTitles).

Show changes

User at 02:05, 19 May 2020

2020-05-19T02:05:37Z

User at 02:02, 19 May 2020

2020-05-19T02:02:57Z

User at 01:57, 19 May 2020

2020-05-19T01:57:55Z

@@ Line 1: / Line 1: @@
 == Definition of Data Security ==
-'''Data Security''' refers to the protection of [[data]] from unauthorized access, use, theft, or destruction. Data security is a critical aspect of modern computing and is essential for protecting sensitive information and maintaining privacy.
+'''Data Security''' refers to the protection of data from unauthorized access, use, theft, or destruction. Data security is a critical aspect of modern computing and is essential for protecting sensitive information and maintaining privacy.
 Data security encompasses a range of measures and strategies, including access control, encryption, backup and recovery, and network security. Access control involves controlling who can access data and what they can do. This includes user authentication, password policies, and role-based access control.

@@ Line 1: / Line 1: @@
 == Definition of Data Security ==
-'''Data Security''' refers to the protection of data from unauthorized access, use, theft, or destruction. Data security is a critical aspect of modern computing and is essential for protecting sensitive information and maintaining privacy.
+'''Data Security''' refers to the protection of [[data]] from unauthorized access, use, theft, or destruction. Data security is a critical aspect of modern computing and is essential for protecting sensitive information and maintaining privacy.
 Data security encompasses a range of measures and strategies, including access control, encryption, backup and recovery, and network security. Access control involves controlling who can access data and what they can do. This includes user authentication, password policies, and role-based access control.
@@ Line 111: / Line 111: @@
 == See Also ==
-[[Cyber Security]]
+#[[Cyber Security]]

@@ Line 36: / Line 36: @@
 == Types of Data Security Controls<ref>Types of Data Security Controls [https://looker.com/definitions/data-security Looker]</ref> ==
 Understanding the importance of data security will help you formulate a plan to protect that data. There are many data security technologies and processes that can support your company’s productivity while safeguarding data. Types of data security controls include:
-*[[Authentication]]: Authentication, along with authorization, is one of the recommended ways to boost data security and protect against data breaches. Authentication technology verifies if a user’s credentials match those stored in your database. Today’s standard authentication processes include using a combination of ways to identify an authorized user, such as passwords, PINS, security tokens, a swipe card, or biometrics. Authentication is made easier through single sign-on technology, which, with one security token, allows an authenticated user access to multiple systems, platforms, and applications. Authorization technology determines what an authenticated user are allowed to do or see on your website or server.
+*Authentication: Authentication, along with authorization, is one of the recommended ways to boost data security and protect against data breaches. Authentication technology verifies if a user’s credentials match those stored in your database. Today’s standard authentication processes include using a combination of ways to identify an authorized user, such as passwords, PINS, security tokens, a swipe card, or biometrics. Authentication is made easier through single sign-on technology, which, with one security token, allows an authenticated user access to multiple systems, platforms, and applications. Authorization technology determines what an authenticated user are allowed to do or see on your website or server.
-*[[Access Control]]: Authentication and authorization happen through the process called access control. Access control systems can include: **Discretionary access control (the least restrictive), which allows access to resources based on the identity of users or groups,
+*Access Control: Authentication and authorization happen through the process called access control. Access control systems can include: **Discretionary access control (the least restrictive), which allows access to resources based on the identity of users or groups,
 **Role-based access control, which assigns access based on organizational role and allows users access only to specific information, and
 **Mandatory access control, which allows a system administrator to strictly control access to all information.

@@ Line 106: / Line 106: @@
 == See Also ==
 <div style="column-count:2;-moz-column-count:4;-webkit-column-count:4">
-[[Data Access]]<br />
+*[[Data]]
-[[Data Analysis]]<br />
+*[[Data Access]]
-[[Data Analytics]]<br />
+*[[Data Analysis]]
-[[Data Architecture]]<br />
+*[[Data Analytics]]
-[[Data Asset Framework (DAF)]]<br />
+*[[Data Architecture]]
-[[Data Buffer]]<br />
+*[[Data Asset Framework (DAF)]]
-[[Data Center]]<br />
+*[[Data Buffer]]
-[[Data Center Infrastructure]]<br />
+*[[Data Center]]
-[[Data Center Infrastructure Management (DCIM)]]<br />
+*[[Data Center Infrastructure]]
-[[Data Cleansing]]<br />
+*[[Data Center Infrastructure Management (DCIM)]]
-[[Data Collection]]<br />
+*[[Data Cleansing]]
-[[Data Compatibility]]<br />
+*[[Data Compatibility]]
-[[Data Consolidation]]<br />
+*[[Data Governance]]
-[[Data Deduplication]]<br />
+*[[Data Integration]]
-[[Data Delivery Platform (DDP)]]<br />
+*[[Data Management]]
-[[Data Description (Definition) Language (DDL)]]<br />
+*[[Data Mining]]
-[[Data Dictionary]]<br />
+*[[Data Monitoring]]
-[[Data Discovery]]<br />
+*[[Data Munging]]
-[[Data Driven Organization]]<br />
+*[[Data Portability]]
-[[Data Element]]<br />
+*[[Data Quality]]
-[[Data Enrichment]]<br />
+*[[Data Reference Model (DRM)]]
-[[Data Entry]]<br />
+*[[Data Transformation]]
-[[Data Federation]]<br />
+*[[Data Visualization]]
-[[Data Flow Diagram]]<br />
+*[[Data Warehouse]]
 </div>

← Older revision		Revision as of 02:05, 19 May 2020
Line 73:		Line 73:
	*Loss of business: Cyber attackers have the potential to not only access and exploit sensitive information; they can also delete the same information. They can even introduce a highly destructive virus which infects the whole system, such as ransomware, requiring the payment of a ransom fee in order to regain access to your networks and sensitive data.		*Loss of business: Cyber attackers have the potential to not only access and exploit sensitive information; they can also delete the same information. They can even introduce a highly destructive virus which infects the whole system, such as ransomware, requiring the payment of a ransom fee in order to regain access to your networks and sensitive data.
	*Poor data security could lead to an event which negatively impacts your business. Even the ability to conduct normal business may be changed. Again, it is a trickle-down effect, in which you may not be able to render the required services, leading to legal action and probable loss of revenue.		*Poor data security could lead to an event which negatively impacts your business. Even the ability to conduct normal business may be changed. Again, it is a trickle-down effect, in which you may not be able to render the required services, leading to legal action and probable loss of revenue.
		+
		+
		+	== Data Security Challenges<ref>What are the top data security challenges? [https://www.ibm.com/security/data-security IBM]</ref> ==
		+	*Explosive data growth: Data is growing at an exponential rate. Keeping up with new data sources across multiple environments creates new complexity at an unprecedented scale.
		+	*New privacy regulations: The General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), Brazil’s Lei Geral de Proteção de Dados (LGPD) and more.
		+	*Operational complexity: Movement to cloud, big data technologies and disparate tools from multiple vendors intensifies complexity.
		+	*Cybersecurity skills shortage: Organizations are already dealing with a lack of skilled security professionals, and this gap is only expected to widen over the next several years.

← Older revision		Revision as of 02:02, 19 May 2020
Line 32:		Line 32:
	*Track User Behavior against Data Groups: The general term plaguing rights management within an organization is “overpermissioning’. That temporary project or rights granted on the network rapidly becomes a convoluted web of interdependencies that result in users collectively having access to far more data on the network than they need for their role. Limit a user’s damage with data security software that profiles user behavior and automatically puts in place permissions to match that behavior.		*Track User Behavior against Data Groups: The general term plaguing rights management within an organization is “overpermissioning’. That temporary project or rights granted on the network rapidly becomes a convoluted web of interdependencies that result in users collectively having access to far more data on the network than they need for their role. Limit a user’s damage with data security software that profiles user behavior and automatically puts in place permissions to match that behavior.
	*Respect Data Privacy: Data Privacy is a distinct aspect of cybersecurity dealing with the rights of individuals and the proper handling of data under your control.		*Respect Data Privacy: Data Privacy is a distinct aspect of cybersecurity dealing with the rights of individuals and the proper handling of data under your control.
		+
		+
		+	== Types of Data Security Controls<ref>Types of Data Security Controls [https://looker.com/definitions/data-security Looker]</ref> ==
		+	Understanding the importance of data security will help you formulate a plan to protect that data. There are many data security technologies and processes that can support your company’s productivity while safeguarding data. Types of data security controls include:
		+	*Authentication: Authentication, along with authorization, is one of the recommended ways to boost data security and protect against data breaches. Authentication technology verifies if a user’s credentials match those stored in your database. Today’s standard authentication processes include using a combination of ways to identify an authorized user, such as passwords, PINS, security tokens, a swipe card, or biometrics. Authentication is made easier through single sign-on technology, which, with one security token, allows an authenticated user access to multiple systems, platforms, and applications. Authorization technology determines what an authenticated user are allowed to do or see on your website or server.
		+	Access Control: Authentication and authorization happen through the process called access control. Access control systems can include: *Discretionary access control (the least restrictive), which allows access to resources based on the identity of users or groups,
		+	**Role-based access control, which assigns access based on organizational role and allows users access only to specific information, and
		+	**Mandatory access control, which allows a system administrator to strictly control access to all information.
		+	*Backups & Recovery: Prioritizing data security also requires a plan for how to access your company’s and client’s data in the event of system failure, disaster, data corruption, or breach. Doing regular data backups is an important activity to help with that access. A data backup entails making a copy of your data and storing it on a separate system or medium such as a tape, disk, or in the cloud. You can then recover lost data by using your backup.
		+	*Encryption: Data encryption software effectively enhances data security by using an algorithm (called a cipher) and an encryption key to turn normal text into encrypted ciphertext. To an unauthorized person, the cipher data will be unreadable. That data can then be decrypted only by a user with an authorized key. Encryption is used to protect the data that you store (called data at rest) and data exchanged between databases, mobile devices, and the cloud (called data in transit). Your encryption keys must be securely managed, including protecting your critical management systems, managing a secure, off-site encryption backup, and restricting access.
		+	*Data Masking: Data masking software hides data by obscuring letters and numbers with proxy characters. The data is still there, behind the masking. The software changes the data back to its original form only when an authorized user receives that data.
		+	*Tokenization: Tokenization substitutes sensitive data with random characters that are not algorithmically reversible. The relationship between the data and its token values is stored in a protected database lookup table, rather than being generated by and decrypted by a mathematical algorithm (as in the case of encryption). The token representing the real data is used across different systems as a replacement, while the actual data is stored on a separate, secure platform.
		+	*Deletions & Erasure: When electronic data is no longer needed and must be permanently cleared from the system, erasure can overwrite that data so that it is irretrievable. Erasure is different from deletion, which is a process that simply hides data in such a way that makes it easy to retrieve.

@@ Line 14: / Line 14: @@
-[[File:Data_Security_Vs_Data_Privacy.png|200px|Data Security Vs. Data Privacy]]<br />
+[[File:Data_Security_Vs_Data_Privacy.png|500px|Data Security Vs. Data Privacy]]<br />
 source: Data Privacy Manager
@@ Line 47: / Line 47: @@
 == Benefits of Data Security and The Potential Risks of Poor Data Security<ref>What are the Benefits of Data Security and t he Potential Risks of Poor Data Security [https://digitalguardian.com/blog/what-data-security Digital Guardian]</ref> ==
 Loss or unauthorized disclosure of valuable data can be quite costly to an organization. It's the reason data security is quite useful. For instance;
-Safeguards all valuable information: Sensitive information is never supposed to leak. Whether we are talking of bank customers’ details or a hospital’s patients’ information; these are crucial information that are not meant for every prying eye. Data security keeps all this information exactly where it's meant to be.
+'''Potential Risks of Poor Data Security'''<br />
 The more technologically advanced businesses become, the more susceptible their systems become to attacks. Poor data security can subject your company to the following dangers:
 == Data Security Best Practices<ref>What Are Best Practices for Data Security? [https://auth0.com/blog/what-is-data-security/ Auth0]</ref> ==