Help
Options
Didn't know it?
click below
click below
Knew it?
click below
click below
Don't Know
Remaining cards (0)
Know
retry
shuffle
restart
0:00
Embed Code - If you would like this activity on your web page, copy the script below and paste it into your web page.
Normal Size Small Size show me how
Normal Size Small Size show me how
3.3
Concepts and strategies to protect data
| Term | Definition |
|---|---|
| Data classifications | category based on the organization's value and the sensitivity of the information if it were to be disclosed |
| Commercial business classification levels | public, sensitive, private, confidential, critical |
| Government classification levels | unclassified, sensitive but unclassified, confidential, secret, top secret |
| Data at rest | any data stored in databases, file systems, or other storage systems |
| Data in transit | data actively moving from one location to another |
| Full disk encryption (FDE) | encrypts an entire hard drive |
| Partition encryption | encrypts specific partitions of a hard drive |
| Volume encryption | encrypts a set of selected files or directories |
| Record encryption | encrypts specific fields in a database |
| Secure sockets layer (SSL) and transport layer security (TLS) | cryptographic protocols that provide secure communication over a computer network |
| Internet protocol security (IPSec) | protocol suite to secure IP communications by authenticating and encrypting each IP packet in a data stream |
| Data in use | data in the process of being created, retrieved, updated, or deleted |
| Regulated data | information controlled by laws, regulations, or industry standards (PII, PHI) |
| Trade secrets | confidential business information that provides a company with a competitive edge |
| Intellectual property | creations of the mind (inventions, designs) |
| Legal information | any data related to legal proceedings, contracts, or regulatory compliance |
| Human-readable data | ex: spreadsheets, documents |
| Non-human readable data | ex: binary |
| Data sovereignty | digital information is subject to the laws of the country in which it is located |
| Geographic restrictions | setting up virtual boundaries based on geographic location |
| Hashing | converting data into a fixed size of alpha/numerical characters |
| Masking | replacing some or all of the data in a field with a placeholder ("x") to conceal the original content |
| Tokenization | replaces sensitive data with a non-sensitive substitutes |
| Obfuscation | making data unclear or unintelligible, making it hard for unauthorized users to understand |
| Segmentation | dividing a network into separate segments, each with its own security controls |
Created by:
crly