Data Custodian
Data Custodian: An individual or organization responsible for the maintenance and care of data or data sources. Their duties typically involve implementing technical controls, procedures, and systems that ensure the safety and quality of the data, such as performing regular backups, enforcing access controls, and ensuring data integrity.
Data Destruction
Data Destruction: The process of eliminating or erasing data from a storage medium, making it completely unreadable and non-recoverable. Methods include physical destruction, degaussing, and software-based overwriting or encryption, all aimed at preventing unauthorized individuals from retrieving and exploiting sensitive information.
Contamination
Contamination: In the context of security, contamination refers to the unintentional introduction or infiltration of unwanted elements, such as malware or erroneous data, into a system or network. This can lead to data corruption, system disruption, or other adverse effects that may compromise the integrity and reliability of the system.
Compartmentalization
Compartmentalization: The strategic division of various components, resources, or entities within a larger system to limit exposure to threats and minimize potential damage. This separation can be achieved in several ways, such as through physical separation, virtualization, or role-based access controls, ensuring that a compromise in one area doesn’t lead to a breach in others.
Compartmented Mode
Compartmented Mode: In a compartmented mode setup, users are given access only to the data they require to perform their tasks and nothing else, thereby minimizing the exposure and possible leakage of sensitive information. This is a rigorous application of the principle of least privilege, often used in environments dealing with highly sensitive data, such […]
Classification
Classification: The process of categorizing data based on its level of sensitivity, value, and criticality. Data can be classified into different categories, such as public, internal, confidential, or highly confidential. The aim of classification is to apply appropriate security controls to safeguard the data. The level of security and access controls implemented is determined by […]