@prefix edu: <https://knobit.org/def/> .
@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix skos: <http://www.w3.org/2004/02/skos/core#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix schema: <https://schema.org/> .

# Generated by knobit-development/export_knobits.py from the register; do not edit.
# Conforms to LCG-KNOBIT 0.1. Metamodel: bitbucket.org/reffa/ontology, metamodel/

<https://knobit.org/id/register/data-security> a schema:Dataset ;
    dcterms:identifier "SCOPE-1" ;
    dcterms:title "Data security and privacy (DAMA-DMBOK2)"@en ;
    dcterms:description "Recognising and repairing defects in data security and privacy deliverables - requirements, classification, access control, privacy records and monitoring - and following sensitive data to everywhere it has been copied: the competence the data-security skill applies, and that skill-tests assesses."@en ;
    skos:note "domain: Data management, data security (DAMA-DMBOK2 chapter 7)"@en ;
    skos:note "level: CDMP Associate: the data security questions of the Data Management Fundamentals exam (DAMA International); CDMP has no data security specialist exam"@en ;
    skos:note "audience: Data security and privacy officers, data owners, and AI models assessed by skill-tests"@en ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    schema:license <https://creativecommons.org/licenses/by/4.0/> ;
    dcterms:rights "Copyright 2026 Peep Küngas. Licensed under CC BY 4.0." ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-101> a edu:Knobit ;
    dcterms:identifier "S-101" ;
    rdfs:label "Recognises a requirement with no control"@en ;
    skos:prefLabel "Recognises a requirement with no control"@en ;
    skos:altLabel "Requirement with no control"@en ;
    skos:definition "Nothing implements it."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "requirement nothing implements"@en ;
    edu:expectedResult "The requirement and the control it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RQ-002 GDPR Art. 30 records of processing, no control Acceptable: CT for the records of processing, owned by the DPO"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Review checklist 01-regulatory-requirements, row 1 (27001 A.5.31)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-151> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-102> a edu:Knobit ;
    dcterms:identifier "S-102" ;
    rdfs:label "Recognises a regulation cited for data it does not cover"@en ;
    skos:prefLabel "Recognises a regulation cited for data it does not cover"@en ;
    skos:altLabel "Regulation cited for data it does not cover"@en ;
    skos:definition "A control or requirement claims a regulation outside its data."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "control or requirement claiming a regulation outside its data"@en ;
    edu:expectedResult "The citation and the regulation that does cover the data"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CT-005 IBAN encryption claimed as PCI DSS Req. 3.5.1 evidence Acceptable: IBAN under GDPR Art. 32 and banking secrecy; PCI only for card data"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Review checklist 01-regulatory-requirements, row 2 (PCI; DMBOK)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-152> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-103> a edu:Knobit ;
    dcterms:identifier "S-103" ;
    rdfs:label "Recognises a requirement with no data scope"@en ;
    skos:prefLabel "Recognises a requirement with no data scope"@en ;
    skos:altLabel "Requirement with no data scope"@en ;
    skos:definition "\"All data\", or no categories or data sets."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "requirement naming no data categories or data sets"@en ;
    edu:expectedResult "The requirement and the scope it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RQ-006 \"All data shall be encrypted\" Acceptable: Categories and data sets named"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Review checklist 01-regulatory-requirements, row 3 (DMBOK)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-151> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-104> a edu:Knobit ;
    dcterms:identifier "S-104" ;
    rdfs:label "Recognises a requirement cited to the wrong article or version"@en ;
    skos:prefLabel "Recognises a requirement cited to the wrong article or version"@en ;
    skos:altLabel "Wrong article or superseded version"@en ;
    skos:definition "The citation does not say what the requirement says, or cites a retired version."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "citation of a wrong or retired provision"@en ;
    edu:expectedResult "The citation and the provision in force"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RQ-005 MFA for the cardholder data environment cited as \"PCI DSS v3.2.1 Req. 8.3\" Acceptable: PCI DSS v4.0.1 Req. 8.4.2"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Review checklist 01-regulatory-requirements, row 4 (PCI; 27001)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-152> ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-154> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-105> a edu:Knobit ;
    dcterms:identifier "S-105" ;
    rdfs:label "Recognises a requirement or control with no owner"@en ;
    skos:prefLabel "Recognises a requirement or control with no owner"@en ;
    skos:altLabel "Requirement or control with no owner"@en ;
    skos:definition "Nobody answers for it."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "obligation or control nobody answers for"@en ;
    edu:expectedResult "The object and its owner"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CT-006 `owner: null` Acceptable: Named owner role"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Review checklist 01-regulatory-requirements, row 5 (27001)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-151> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/G-403> a edu:Knobit ;
    dcterms:identifier "S-106" ;
    rdfs:label "Recognises a security control with no evidence"@en ;
    skos:prefLabel "Recognises a security control with no evidence"@en ;
    skos:altLabel "Control with no evidence"@en ;
    skos:definition "Never tested, or no evidence of operation."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGeneratedAiEdited> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "control without evidence or test date"@en ;
    edu:expectedResult "The control and the evidence it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CT-007 `evidence: null`, `tested: null` Acceptable: Evidence and test date"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Review checklist 01-regulatory-requirements, row 6 (27001; DORA)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-151> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-107> a edu:Knobit ;
    dcterms:identifier "S-107" ;
    rdfs:label "Recognises a regulation in force with no requirements"@en ;
    skos:prefLabel "Recognises a regulation in force with no requirements"@en ;
    skos:altLabel "Regulation in force with no requirements"@en ;
    skos:definition "A regulation the bank must meet that produced nothing."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "applicable regulation that produced no requirement"@en ;
    edu:expectedResult "The regulation and the requirements to draw from it"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: DORA and the EBA guidelines in force; no RQ cites them Acceptable: Requirements for ICT access, logging and resilience"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Review checklist 01-regulatory-requirements, row 7 (DORA)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-152> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-108> a edu:Knobit ;
    dcterms:identifier "S-108" ;
    rdfs:label "Recognises regulated data outside its requirement's scope"@en ;
    skos:prefLabel "Recognises regulated data outside its requirement's scope"@en ;
    skos:altLabel "Regulated data outside the requirement's scope"@en ;
    skos:definition "A copy of regulated data in a data set the requirement does not list."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "copy of regulated data in a data set the requirement omits"@en ;
    edu:expectedResult "The copy, the data set and the requirement whose scope it enters"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: PAN copied into the legacy warehouse (DS-007) for card spend reporting; RQ-004 scope `[DS-004]` Acceptable: DS-007 in PCI scope with its jobs, readers and backups - or the PAN removed or truncated there"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Review checklist 01-regulatory-requirements, row 8 (PCI scope; DMBOK)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-152> ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-153> ;
    edu:followedBy <https://knobit.org/id/knobit/S-131> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-109> a edu:Knobit ;
    dcterms:identifier "S-109" ;
    rdfs:label "Recognises a control unable to satisfy its requirement"@en ;
    skos:prefLabel "Recognises a control unable to satisfy its requirement"@en ;
    skos:altLabel "Control unable to satisfy its requirement"@en ;
    skos:definition "The control as described cannot meet the requirement as worded."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "control whose design cannot meet the requirement's wording"@en ;
    edu:expectedResult "The control, the requirement and the gap"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CT-003 \"CVV purged nightly\" for RQ-003 \"SAD not retained after authorisation\" Acceptable: CVV never written to storage"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Review checklist 01-regulatory-requirements, row 9 (PCI 3.3.1)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-154> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-110> a edu:Knobit ;
    dcterms:identifier "S-110" ;
    rdfs:label "Recognises conflicting requirements with no precedence"@en ;
    skos:prefLabel "Recognises conflicting requirements with no precedence"@en ;
    skos:altLabel "Conflicting requirements with no precedence"@en ;
    skos:definition "Two requirements on the same data whose controls contradict."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "requirements on one data set whose controls contradict"@en ;
    edu:expectedResult "The pair, the data and the precedence to be decided"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RQ-007 erasure on request vs RQ-008 AML retention, both on DS-002 Acceptable: Precedence recorded by the DPO (Art. 17(3)(b))"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Review checklist 01-regulatory-requirements, row 10 (GDPR; DMBOK)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-155> ;
    edu:followedBy <https://knobit.org/id/knobit/S-132> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-131> a edu:Knobit ;
    dcterms:identifier "S-131" ;
    rdfs:label "Traces the scope consequence of a regulated data copy"@en ;
    skos:prefLabel "Traces the scope consequence of a regulated data copy"@en ;
    skos:definition "The data set, the jobs writing it, its readers and its backups brought into scope, or the data removed or truncated there - proposed to the requirement's owner"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Traces"@en ;
    edu:targetObject "copy of regulated data outside its scope"@en ;
    edu:expectedResult "The data set, the jobs writing it, its readers and its backups brought into scope, or the data removed or truncated there - proposed to the requirement's owner"@en ;
    edu:assessmentCriterion "The answer names what the copy brings into scope beyond the column itself"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Graded on its own by dsec-regulatory-requirements"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-153> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-132> a edu:Knobit ;
    dcterms:identifier "S-132" ;
    rdfs:label "Raises a requirement conflict for the owner of the interpretation"@en ;
    skos:prefLabel "Raises a requirement conflict for the owner of the interpretation"@en ;
    skos:definition "An open question to the DPO or compliance owner with the provision that may decide it"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Raises"@en ;
    edu:targetObject "pair of conflicting requirements"@en ;
    edu:expectedResult "An open question to the DPO or compliance owner with the provision that may decide it"@en ;
    edu:assessmentCriterion "The conflict is not resolved by the reviewer; the provision (e.g. GDPR Art. 17(3)(b)) is cited"@en ;
    edu:assessmentMethod "skill-tests task: Bank data security requirements register (dsec-regulatory-requirements)"@en ;
    dcterms:source "Graded on its own by dsec-regulatory-requirements"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-155> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-151> a edu:Knobit ;
    dcterms:identifier "S-151" ;
    rdfs:label "Explains the regulatory requirements register"@en ;
    skos:prefLabel "Explains the regulatory requirements register"@en ;
    skos:definition "Each obligation records its source provision, the data it applies to, the control that meets it, an owner and evidence (ISO/IEC 27001:2022 4.2 and A.5.31; DMBOK2 ch. 7)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "requirements register"@en ;
    edu:expectedResult "Each obligation records its source provision, the data it applies to, the control that meets it, an owner and evidence (ISO/IEC 27001:2022 4.2 and A.5.31; DMBOK2 ch. 7)."@en ;
    edu:assessmentCriterion "Answers a written question on the requirements register correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 1 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-152> a edu:Knobit ;
    dcterms:identifier "S-152" ;
    rdfs:label "Explains which regulations cover which bank data"@en ;
    skos:prefLabel "Explains which regulations cover which bank data"@en ;
    skos:definition "GDPR covers personal data, PCI DSS v4.0.1 cardholder and sensitive authentication data only, DORA and the EBA ICT guidelines the bank's ICT risk, banking secrecy customer data."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "regulatory coverage of bank data"@en ;
    edu:expectedResult "GDPR covers personal data, PCI DSS v4.0.1 cardholder and sensitive authentication data only, DORA and the EBA ICT guidelines the bank's ICT risk, banking secrecy customer data."@en ;
    edu:assessmentCriterion "Answers a written question on the regulatory coverage of bank data correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 1 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-153> a edu:Knobit ;
    dcterms:identifier "S-153" ;
    rdfs:label "Explains PCI DSS scope"@en ;
    skos:prefLabel "Explains PCI DSS scope"@en ;
    skos:definition "The cardholder data environment: every system that stores, processes or transmits cardholder data, and the systems connected to it; a copy of the PAN brings its store, jobs, users and backups into scope."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "PCI DSS scope"@en ;
    edu:expectedResult "The cardholder data environment: every system that stores, processes or transmits cardholder data, and the systems connected to it; a copy of the PAN brings its store, jobs, users and backups into scope."@en ;
    edu:assessmentCriterion "Answers a written question on the PCI DSS scope correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 1 reference and review checklist rest on"@en ;
    edu:dependsOnKnobit <https://knobit.org/id/knobit/S-152> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-154> a edu:Knobit ;
    dcterms:identifier "S-154" ;
    rdfs:label "Explains PCI DSS requirements on stored card data"@en ;
    skos:prefLabel "Explains PCI DSS requirements on stored card data"@en ;
    skos:definition "Sensitive authentication data is never retained after authorisation (Req. 3.3.1); PAN is unreadable wherever stored (Req. 3.5.1); v4.0.1 is the version in force."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "PCI DSS stored-data requirements"@en ;
    edu:expectedResult "Sensitive authentication data is never retained after authorisation (Req. 3.3.1); PAN is unreadable wherever stored (Req. 3.5.1); v4.0.1 is the version in force."@en ;
    edu:assessmentCriterion "Answers a written question on the PCI DSS stored-data requirements correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 1 reference and review checklist rest on"@en ;
    edu:dependsOnKnobit <https://knobit.org/id/knobit/S-152> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-155> a edu:Knobit ;
    dcterms:identifier "S-155" ;
    rdfs:label "Explains the limits of erasure against legal retention"@en ;
    skos:prefLabel "Explains the limits of erasure against legal retention"@en ;
    skos:definition "GDPR Art. 17(3)(b): erasure does not apply where processing is needed to comply with a legal obligation such as AML record keeping; the precedence is the DPO's call per record type."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "erasure and retention"@en ;
    edu:expectedResult "GDPR Art. 17(3)(b): erasure does not apply where processing is needed to comply with a legal obligation such as AML record keeping; the precedence is the DPO's call per record type."@en ;
    edu:assessmentCriterion "Answers a written question on the erasure and retention correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 1 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-201> a edu:Knobit ;
    dcterms:identifier "S-201" ;
    rdfs:label "Recognises a card number not classified as cardholder data"@en ;
    skos:prefLabel "Recognises a card number not classified as cardholder data"@en ;
    skos:altLabel "Card number not classified as cardholder data"@en ;
    skos:definition "A PAN column without the CHD category or below `restricted`."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "PAN column without the cardholder data category"@en ;
    edu:expectedResult "The column with cardholder data at restricted"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CO-003 `card_txn_analytics.card_number`, `internal`, no categories Acceptable: `restricted`, CHD"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Review checklist 02-classification, row 1 (PCI; DMBOK)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-251> ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-153> ;
    edu:followedBy <https://knobit.org/id/knobit/S-231> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-202> a edu:Knobit ;
    dcterms:identifier "S-202" ;
    rdfs:label "Recognises a derived column less sensitive than its source"@en ;
    skos:prefLabel "Recognises a derived column less sensitive than its source"@en ;
    skos:altLabel "Derived column less sensitive than its source with no rule"@en ;
    skos:definition "A derived column at a lower level than its source, no derivation rule."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "derived column below its source's level with no rule"@en ;
    edu:expectedResult "The column at its source's level, or the rule that allows less"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CO-007 `customer_profile.birth_date` derived from `party.personal_code`, `internal` Acceptable: `restricted` as its source, or a rule (year of birth only)"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Review checklist 02-classification, row 2 (DMBOK; 27002)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-252> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-203> a edu:Knobit ;
    dcterms:identifier "S-203" ;
    rdfs:label "Recognises an aggregate still identifying a person"@en ;
    skos:prefLabel "Recognises an aggregate still identifying a person"@en ;
    skos:altLabel "Aggregate that still identifies a person"@en ;
    skos:definition "Groups small enough to single out one customer, classified as non-personal."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "aggregate with groups small enough to single out a customer"@en ;
    edu:expectedResult "The aggregate and the group-size rule it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CO-011 `branch_income_stats.avg_income` grouped by branch and birth year, `public`; groups of 1 Acceptable: Minimum group size 10 with small cells suppressed, then `internal`"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Review checklist 02-classification, row 3 (GDPR rec. 26; 20889)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-253> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-204> a edu:Knobit ;
    dcterms:identifier "S-204" ;
    rdfs:label "Recognises an unclassified column"@en ;
    skos:prefLabel "Recognises an unclassified column"@en ;
    skos:altLabel "Column with no classification"@en ;
    skos:definition "No level at all."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "column with no classification level"@en ;
    edu:expectedResult "The column and its level"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CO-009 `loan_application.employer_name`, `level: null` Acceptable: `confidential`, personal"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Review checklist 02-classification, row 4 (27002 5.12)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-251> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-205> a edu:Knobit ;
    dcterms:identifier "S-205" ;
    rdfs:label "Recognises stored sensitive authentication data"@en ;
    skos:prefLabel "Recognises stored sensitive authentication data"@en ;
    skos:altLabel "Sensitive authentication data stored"@en ;
    skos:definition "A CVV, PIN block or full track column exists."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "CVV, PIN block or track data column"@en ;
    edu:expectedResult "The column to be removed, not classified"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CO-004 `card_auth_log.cvv2` Acceptable: Column removed; nothing to classify"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Review checklist 02-classification, row 5 (PCI 3.3.1)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-154> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-206> a edu:Knobit ;
    dcterms:identifier "S-206" ;
    rdfs:label "Recognises a level below its category's minimum"@en ;
    skos:prefLabel "Recognises a level below its category's minimum"@en ;
    skos:altLabel "Level below the category's minimum"@en ;
    skos:definition "A category is set but the level is lower than its minimum."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "column whose level is under a category's minimum"@en ;
    edu:expectedResult "The column at the category's minimum"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CO-005 `party.personal_code`, direct identifier (min `restricted`), level `internal` Acceptable: `restricted`"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Review checklist 02-classification, row 6 (27002; DMBOK)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-251> ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-254> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-207> a edu:Knobit ;
    dcterms:identifier "S-207" ;
    rdfs:label "Recognises pseudonymised data treated as anonymous"@en ;
    skos:prefLabel "Recognises pseudonymised data treated as anonymous"@en ;
    skos:altLabel "Pseudonymised data treated as anonymous"@en ;
    skos:definition "A hash or token of an identifier classified as non-personal."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "hash or token of an identifier classified as non-personal"@en ;
    edu:expectedResult "The column as pseudonymised personal data"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CO-006 `txn_analytics.customer_hash` (SHA-256 of the personal code), `public`, no categories Acceptable: `confidential`, personal (pseudonymised)"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Review checklist 02-classification, row 7 (GDPR rec. 26; 20889)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-253> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-208> a edu:Knobit ;
    dcterms:identifier "S-208" ;
    rdfs:label "Recognises unrecognised special category data"@en ;
    skos:prefLabel "Recognises unrecognised special category data"@en ;
    skos:altLabel "Special category data not recognised"@en ;
    skos:definition "Free text or codes revealing health or other Art. 9 data, classified by their label."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "free text or code revealing health or other Art. 9 data"@en ;
    edu:expectedResult "The column with the special category at restricted"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CO-010 `hardship_case.reason_text`, `confidential`, personal only Acceptable: `restricted`, special category"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Review checklist 02-classification, row 8 (GDPR Art. 9)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-254> ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/K12-70093> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-209> a edu:Knobit ;
    dcterms:identifier "S-209" ;
    rdfs:label "Recognises a derivation rule leaving data identifying"@en ;
    skos:prefLabel "Recognises a derivation rule leaving data identifying"@en ;
    skos:altLabel "Derivation rule that does not de-identify"@en ;
    skos:definition "A rule allowing a lower level whose method leaves the data identifying."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "derivation rule whose method leaves data identifying"@en ;
    edu:expectedResult "The rule and the method the standard allows"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: DR-002 \"PAN masked to first 6 and last 6 digits\" -> `confidential` Acceptable: First 6 and last 4 at most (PCI DSS 3.4.1)"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Review checklist 02-classification, row 9 (PCI 3.4.1)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-252> ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-154> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-210> a edu:Knobit ;
    dcterms:identifier "S-210" ;
    rdfs:label "Recognises a classification disagreeing with the physical model"@en ;
    skos:prefLabel "Recognises a classification disagreeing with the physical model"@en ;
    skos:altLabel "Classification disagreeing with the physical model"@en ;
    skos:definition "The column's level here differs from its `classification` in data-modelling."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "column classified differently in two places"@en ;
    edu:expectedResult "The two levels and the owner who decides"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CO-008 `account.iban`: `confidential` here, `internal` in the physical model Acceptable: One level, with the disagreement raised with the data owner"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Review checklist 02-classification, row 10 (DMBOK)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-251> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-211> a edu:Knobit ;
    dcterms:identifier "S-211" ;
    rdfs:label "Recognises a classification level with no handling rules"@en ;
    skos:prefLabel "Recognises a classification level with no handling rules"@en ;
    skos:altLabel "Level with no handling rules"@en ;
    skos:definition "A level that says nothing about storage, access, transfer, masking or disposal."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "level without handling rules"@en ;
    edu:expectedResult "The level and the handling rules it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: CL-4 `restricted`, `handling: null` Acceptable: Encrypted at rest with keys outside the database, named roles only, masked everywhere outside its system of record, no export without approval"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Review checklist 02-classification, row 11 (27002 5.12-5.13)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-251> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-231> a edu:Knobit ;
    dcterms:identifier "S-231" ;
    rdfs:label "Propagates classification to derived columns"@en ;
    skos:prefLabel "Propagates classification to derived columns"@en ;
    skos:definition "Every column derived from a sensitive source at its source's level and categories, or under a named rule"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Propagates"@en ;
    edu:targetObject "classification of derived columns"@en ;
    edu:expectedResult "Every column derived from a sensitive source at its source's level and categories, or under a named rule"@en ;
    edu:assessmentCriterion "No derived copy of the PAN or of a direct identifier sits below its source without a rule"@en ;
    edu:assessmentMethod "skill-tests task: Bank column classification (dsec-classification)"@en ;
    dcterms:source "Graded on its own by dsec-classification"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-252> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-251> a edu:Knobit ;
    dcterms:identifier "S-251" ;
    rdfs:label "Explains a data classification scheme"@en ;
    skos:prefLabel "Explains a data classification scheme"@en ;
    skos:definition "Levels (public, internal, confidential, restricted) with handling rules, categories (personal, direct identifier, special category, cardholder data, banking secrecy) with minimum levels, applied to every column (ISO/IEC 27002:2022 5.12-5.13)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "classification scheme"@en ;
    edu:expectedResult "Levels (public, internal, confidential, restricted) with handling rules, categories (personal, direct identifier, special category, cardholder data, banking secrecy) with minimum levels, applied to every column (ISO/IEC 27002:2022 5.12-5.13)."@en ;
    edu:assessmentCriterion "Answers a written question on the classification scheme correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 2 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-252> a edu:Knobit ;
    dcterms:identifier "S-252" ;
    rdfs:label "Explains classification of derived data"@en ;
    skos:prefLabel "Explains classification of derived data"@en ;
    skos:definition "A derived column inherits its source's level and categories unless a derivation rule, such as PAN truncation to first six and last four (PCI DSS 3.4.1), allows less."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "derived data classification"@en ;
    edu:expectedResult "A derived column inherits its source's level and categories unless a derivation rule, such as PAN truncation to first six and last four (PCI DSS 3.4.1), allows less."@en ;
    edu:assessmentCriterion "Answers a written question on the derived data classification correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 2 reference and review checklist rest on"@en ;
    edu:dependsOnKnobit <https://knobit.org/id/knobit/S-251> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-253> a edu:Knobit ;
    dcterms:identifier "S-253" ;
    rdfs:label "Explains anonymisation against pseudonymisation"@en ;
    skos:prefLabel "Explains anonymisation against pseudonymisation"@en ;
    skos:definition "Hashed or tokenised identifiers remain personal data (GDPR recital 26); an aggregate is anonymous only if no group can single out a person (minimum group size, small-cell suppression; ISO/IEC 20889)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "anonymisation and pseudonymisation"@en ;
    edu:expectedResult "Hashed or tokenised identifiers remain personal data (GDPR recital 26); an aggregate is anonymous only if no group can single out a person (minimum group size, small-cell suppression; ISO/IEC 20889)."@en ;
    edu:assessmentCriterion "Answers a written question on the anonymisation and pseudonymisation correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 2 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-254> a edu:Knobit ;
    dcterms:identifier "S-254" ;
    rdfs:label "Explains special categories of personal data"@en ;
    skos:prefLabel "Explains special categories of personal data"@en ;
    skos:definition "Health, religion, ethnicity and the other GDPR Art. 9 categories, wherever they appear - free text included."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "special categories of personal data"@en ;
    edu:expectedResult "Health, religion, ethnicity and the other GDPR Art. 9 categories, wherever they appear - free text included."@en ;
    edu:assessmentCriterion "Answers a written question on the special categories of personal data correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 2 reference and review checklist rest on"@en ;
    edu:dependsOnKnobit <https://knobit.org/id/knobit/K12-70093> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-301> a edu:Knobit ;
    dcterms:identifier "S-301" ;
    rdfs:label "Recognises a role granting more than its jobs require"@en ;
    skos:prefLabel "Recognises a role granting more than its jobs require"@en ;
    skos:altLabel "Role granting more than its jobs need"@en ;
    skos:definition "An entitlement in a role that no job holding the role needs."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "role entitlement no job holding the role needs"@en ;
    edu:expectedResult "The entitlement and its removal or the job need to state"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RL-004 ANALYST includes EN-030 export full customer list; JB-005 needs only analytical reads Acceptable: EN-030 removed, or a job whose need is stated"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Review checklist 03-access-control, row 1 (27002 5.15, 5.18; PCI 7)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-351> ;
    edu:followedBy <https://knobit.org/id/knobit/S-333> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-302> a edu:Knobit ;
    dcterms:identifier "S-302" ;
    rdfs:label "Recognises a toxic combination in one role"@en ;
    skos:prefLabel "Recognises a toxic combination in one role"@en ;
    skos:altLabel "Toxic combination in one role"@en ;
    skos:definition "A role holding both sides of an SoD rule."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "role holding both sides of a segregation-of-duties rule"@en ;
    edu:expectedResult "The role, the rule and the split needed"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RL-003 PAY_OPS holds EN-020 create payment and EN-022 approve payment (SD-001) Acceptable: Approve moved to RL-008"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Review checklist 03-access-control, row 2 (27002 5.3)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/G-255> ;
    edu:followedBy <https://knobit.org/id/knobit/S-331> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-303> a edu:Knobit ;
    dcterms:identifier "S-303" ;
    rdfs:label "Recognises a toxic combination across a job's roles"@en ;
    skos:prefLabel "Recognises a toxic combination across a job's roles"@en ;
    skos:altLabel "Toxic combination across roles"@en ;
    skos:definition "A job holding two roles that together break an SoD rule."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "job holding roles that together break a segregation rule"@en ;
    edu:expectedResult "The job, the roles and the rule"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: JB-003 payments operator holds RL-003 (create) and RL-008 (approve) Acceptable: JB-003 holds RL-003 only; JB-004 holds RL-008"@en ;
    edu:assessmentMethod "Review of the stage 3 eval project (reffa/skills, data-security/evals)"@en ;
    dcterms:source "Review checklist 03-access-control, row 3 (27002 5.3)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/G-255> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-304> a edu:Knobit ;
    dcterms:identifier "S-304" ;
    rdfs:label "Recognises masking a join can undo"@en ;
    skos:prefLabel "Recognises masking a join can undo"@en ;
    skos:altLabel "Masking a join can undo"@en ;
    skos:definition "A masked column next to an unmasked key that joins to the unmasked source."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "masked column next to an unmasked key joining to clear data"@en ;
    edu:expectedResult "The masked column, the key and the clear table it reaches"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: MK-001 masks `customer_view.name`; the view exposes `personal_code`, which joins to `party` in clear Acceptable: Key masked or tokenised in the view too"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Review checklist 03-access-control, row 4 (27002 8.11)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-353> ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/K12-69062> ;
    edu:followedBy <https://knobit.org/id/knobit/S-332> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-305> a edu:Knobit ;
    dcterms:identifier "S-305" ;
    rdfs:label "Recognises row security on an updatable column"@en ;
    skos:prefLabel "Recognises row security on an updatable column"@en ;
    skos:altLabel "Row security on an updatable column"@en ;
    skos:definition "The row filter reads a column the restricted user can change."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "row filter on a column the restricted user can change"@en ;
    edu:expectedResult "The filter and an attribute the user cannot change"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RS-001 teller sees rows where `account.branch_code = user.branch`; tellers can update `account.branch_code` Acceptable: Branch from the HR directory; branch_code read-only to tellers"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Review checklist 03-access-control, row 5 (27002 8.3)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-355> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-306> a edu:Knobit ;
    dcterms:identifier "S-306" ;
    rdfs:label "Recognises a privileged role with no logging"@en ;
    skos:prefLabel "Recognises a privileged role with no logging"@en ;
    skos:altLabel "Privileged role with no logging"@en ;
    skos:definition "A privileged role whose use is not logged."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "privileged role whose use is not logged"@en ;
    edu:expectedResult "The role and the logging it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RL-006 DBA, `logged: false` Acceptable: All privileged sessions logged"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Review checklist 03-access-control, row 6 (27002 8.2, 8.15)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-354> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-307> a edu:Knobit ;
    dcterms:identifier "S-307" ;
    rdfs:label "Recognises break-glass access with no expiry"@en ;
    skos:prefLabel "Recognises break-glass access with no expiry"@en ;
    skos:altLabel "Break-glass access with no expiry"@en ;
    skos:definition "Emergency access granted with no end."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "emergency access without an end"@en ;
    edu:expectedResult "The grant and its expiry and review"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: BG-001 emergency payments admin, `expires: null` Acceptable: Expires after the incident, max 24 hours, reviewed"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Review checklist 03-access-control, row 7 (27002 8.2)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-354> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-308> a edu:Knobit ;
    dcterms:identifier "S-308" ;
    rdfs:label "Recognises an access role with no owner"@en ;
    skos:prefLabel "Recognises an access role with no owner"@en ;
    skos:altLabel "Role with no owner"@en ;
    skos:definition "Nobody approves or recertifies it."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "role nobody approves or recertifies"@en ;
    edu:expectedResult "The role and its owner"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RL-005 `owner: null` Acceptable: Owner named"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Review checklist 03-access-control, row 8 (27002 5.18)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-351> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-309> a edu:Knobit ;
    dcterms:identifier "S-309" ;
    rdfs:label "Recognises an administrator reading restricted data"@en ;
    skos:prefLabel "Recognises an administrator reading restricted data"@en ;
    skos:altLabel "Administrator with business read of restricted data"@en ;
    skos:definition "A DBA or admin role reading customer data in clear by default."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "admin role with business reads of customer data in clear"@en ;
    edu:expectedResult "The role and the reads to remove"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RL-006 DBA has SELECT on `party.personal_code` Acceptable: Admin without business reads; break-glass for incidents"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Review checklist 03-access-control, row 9 (27002 8.2; PCI 7)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-354> ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-351> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-310> a edu:Knobit ;
    dcterms:identifier "S-310" ;
    rdfs:label "Recognises masking applied to one copy only"@en ;
    skos:prefLabel "Recognises masking applied to one copy only"@en ;
    skos:altLabel "Masking on one copy only"@en ;
    skos:definition "The same column masked in one place and in clear in another reachable copy."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "column masked in one copy and clear in another"@en ;
    edu:expectedResult "The copy still in clear"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: MK-002 masks the PAN in `card_txn_analytics`; the Finance BI extract carries it in clear Acceptable: Every copy masked or tokenised"@en ;
    edu:assessmentMethod "Review of the stage 3 eval project (reffa/skills, data-security/evals)"@en ;
    dcterms:source "Review checklist 03-access-control, row 10 (27002 8.11; PCI 3.4)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-353> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-311> a edu:Knobit ;
    dcterms:identifier "S-311" ;
    rdfs:label "Recognises a shared privileged account"@en ;
    skos:prefLabel "Recognises a shared privileged account"@en ;
    skos:altLabel "Shared or generic privileged account"@en ;
    skos:definition "A privileged account not tied to one person."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "privileged account not tied to one person"@en ;
    edu:expectedResult "The account and personal or non-interactive replacements"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RL-009 SVC_REPORTING, interactive login shared by the BI team, with admin Acceptable: Personal accounts; service account non-interactive, least privilege"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Review checklist 03-access-control, row 11 (27002 5.16, 8.2)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-354> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/K-821> a edu:Knobit ;
    dcterms:identifier "S-312" ;
    rdfs:label "Recognises a restricted column without access design"@en ;
    skos:prefLabel "Recognises a restricted column without access design"@en ;
    skos:altLabel "Restricted column with no access design"@en ;
    skos:definition "A restricted column no role, masking or row policy addresses."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGeneratedAiEdited> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "restricted column no role, mask or row policy addresses"@en ;
    edu:expectedResult "The column and the access design it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: `hardship_case.reason_text` restricted, no access design Acceptable: Named role, masked elsewhere"@en ;
    edu:assessmentMethod "Review of the stage 3 eval project (reffa/skills, data-security/evals)"@en ;
    dcterms:source "Review checklist 03-access-control, row 12 (27002 8.3; DMBOK)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-351> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-331> a edu:Knobit ;
    dcterms:identifier "S-331" ;
    rdfs:label "Splits a toxic combination into separate roles"@en ;
    skos:prefLabel "Splits a toxic combination into separate roles"@en ;
    skos:definition "Separate roles held by different jobs, every duty still covered"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Splits"@en ;
    edu:targetObject "role holding both sides of a duty conflict"@en ;
    edu:expectedResult "Separate roles held by different jobs, every duty still covered"@en ;
    edu:assessmentCriterion "The conflict is removed by design, not only monitored"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Graded on its own by dsec-access-control"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/G-255> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-332> a edu:Knobit ;
    dcterms:identifier "S-332" ;
    rdfs:label "Closes the clear-text paths around a masked column"@en ;
    skos:prefLabel "Closes the clear-text paths around a masked column"@en ;
    skos:definition "The joining key masked or tokenised, or the clear table out of the role's reach"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Closes"@en ;
    edu:targetObject "masking a join can undo"@en ;
    edu:expectedResult "The joining key masked or tokenised, or the clear table out of the role's reach"@en ;
    edu:assessmentCriterion "No path from the masked view reaches the value in clear"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Graded on its own by dsec-access-control"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-353> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-333> a edu:Knobit ;
    dcterms:identifier "S-333" ;
    rdfs:label "Removes excess entitlements while keeping every duty covered"@en ;
    skos:prefLabel "Removes excess entitlements while keeping every duty covered"@en ;
    skos:definition "Roles reduced to their jobs' needs with every stated duty still held by some role"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Removes"@en ;
    edu:targetObject "over-privileged role design"@en ;
    edu:expectedResult "Roles reduced to their jobs' needs with every stated duty still held by some role"@en ;
    edu:assessmentCriterion "Every job need maps to an entitlement of a role the job holds, and nothing more"@en ;
    edu:assessmentMethod "skill-tests task: Bank role and entitlement design (dsec-access-control)"@en ;
    dcterms:source "Graded on its own by dsec-access-control"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-351> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-351> a edu:Knobit ;
    dcterms:identifier "S-351" ;
    rdfs:label "Explains least-privilege access design"@en ;
    skos:prefLabel "Explains least-privilege access design"@en ;
    skos:definition "Jobs state their needs; roles are built from jobs; every entitlement traces to a need; roles have owners (ISO/IEC 27002:2022 5.15, 5.18; PCI DSS v4.0.1 Req. 7)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "least-privilege access design"@en ;
    edu:expectedResult "Jobs state their needs; roles are built from jobs; every entitlement traces to a need; roles have owners (ISO/IEC 27002:2022 5.15, 5.18; PCI DSS v4.0.1 Req. 7)."@en ;
    edu:assessmentCriterion "Answers a written question on the least-privilege access design correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 3 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/G-255> a edu:Knobit ;
    dcterms:identifier "S-352" ;
    rdfs:label "Explains segregation of duties"@en ;
    skos:prefLabel "Explains segregation of duties"@en ;
    skos:definition "The person who approves or checks is not the one who performs; conflicts are forbidden combinations checked across everything one person holds (ISO/IEC 27002:2022 5.3)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGeneratedAiEdited> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "segregation of duties"@en ;
    edu:expectedResult "The person who approves or checks is not the one who performs; conflicts are forbidden combinations checked across everything one person holds (ISO/IEC 27002:2022 5.3)."@en ;
    edu:assessmentCriterion "Answers a written question on the segregation of duties correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 3 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-353> a edu:Knobit ;
    dcterms:identifier "S-353" ;
    rdfs:label "Explains data masking and its limits"@en ;
    skos:prefLabel "Explains data masking and its limits"@en ;
    skos:definition "Masking hides values from roles that need less, and holds only if no key, copy or filter in reach recovers them (ISO/IEC 27002:2022 8.11)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "data masking"@en ;
    edu:expectedResult "Masking hides values from roles that need less, and holds only if no key, copy or filter in reach recovers them (ISO/IEC 27002:2022 8.11)."@en ;
    edu:assessmentCriterion "Answers a written question on the data masking correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 3 reference and review checklist rest on"@en ;
    edu:dependsOnKnobit <https://knobit.org/id/knobit/K12-69062> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-354> a edu:Knobit ;
    dcterms:identifier "S-354" ;
    rdfs:label "Explains privileged and emergency access"@en ;
    skos:prefLabel "Explains privileged and emergency access"@en ;
    skos:definition "Named, logged, time-limited privileged access without business reads; break-glass expires and is reviewed (ISO/IEC 27002:2022 8.2, 8.15)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "privileged and break-glass access"@en ;
    edu:expectedResult "Named, logged, time-limited privileged access without business reads; break-glass expires and is reviewed (ISO/IEC 27002:2022 8.2, 8.15)."@en ;
    edu:assessmentCriterion "Answers a written question on the privileged and break-glass access correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 3 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-355> a edu:Knobit ;
    dcterms:identifier "S-355" ;
    rdfs:label "Explains row-level security"@en ;
    skos:prefLabel "Explains row-level security"@en ;
    skos:definition "Row filters keyed on attributes the user cannot change, from an authoritative source (ISO/IEC 27002:2022 8.3)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "row-level security"@en ;
    edu:expectedResult "Row filters keyed on attributes the user cannot change, from an authoritative source (ISO/IEC 27002:2022 8.3)."@en ;
    edu:assessmentCriterion "Answers a written question on the row-level security correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 3 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-401> a edu:Knobit ;
    dcterms:identifier "S-401" ;
    rdfs:label "Recognises a wrong or missing lawful basis"@en ;
    skos:prefLabel "Recognises a wrong or missing lawful basis"@en ;
    skos:altLabel "No lawful basis, or the wrong one"@en ;
    skos:definition "A record with no basis, or consent where the bank must process anyway."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "processing record without the basis the bank relies on"@en ;
    edu:expectedResult "The record and the basis that fits the purpose"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: PA-002 creditworthiness assessment, `lawful_basis: consent` Acceptable: Art. 6(1)(c) legal obligation (consumer credit law) and 6(1)(b) contract"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Review checklist 04-privacy, row 1 (GDPR Art. 6; EDPB)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-451> ;
    edu:followedBy <https://knobit.org/id/knobit/S-431> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-402> a edu:Knobit ;
    dcterms:identifier "S-402" ;
    rdfs:label "Recognises a purpose wide enough to allow anything"@en ;
    skos:prefLabel "Recognises a purpose wide enough to allow anything"@en ;
    skos:altLabel "Purpose wide enough to allow anything"@en ;
    skos:definition "A purpose no data item could fail to be necessary for."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "purpose no data item could fail to be necessary for"@en ;
    edu:expectedResult "The purpose and its specific replacements"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: PA-006 \"improve customer experience\" Acceptable: A specific purpose, or split into specific ones"@en ;
    edu:assessmentMethod "Review of the stage 4 eval project (reffa/skills, data-security/evals)"@en ;
    dcterms:source "Review checklist 04-privacy, row 2 (GDPR Art. 5(1)(b))"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/O-1904> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-403> a edu:Knobit ;
    dcterms:identifier "S-403" ;
    rdfs:label "Recognises data beyond what the purpose requires"@en ;
    skos:prefLabel "Recognises data beyond what the purpose requires"@en ;
    skos:altLabel "Data beyond what the purpose needs"@en ;
    skos:definition "Items the purpose does not need."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "data items a purpose does not require"@en ;
    edu:expectedResult "The items to remove or justify"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: PA-001 loan application collects marital history and social media profile Acceptable: Removed, or the need stated"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Review checklist 04-privacy, row 3 (GDPR Art. 5(1)(c))"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/O-1904> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-404> a edu:Knobit ;
    dcterms:identifier "S-404" ;
    rdfs:label "Recognises retention longer than the purpose"@en ;
    skos:prefLabel "Recognises retention longer than the purpose"@en ;
    skos:altLabel "Retention longer than the purpose"@en ;
    skos:definition "A period beyond purpose or legal retention."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "retention period beyond purpose or legal retention"@en ;
    edu:expectedResult "The period and the one the purpose supports"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: PA-004 marketing data kept 10 years after the last contact Acceptable: Until objection or 2 years after the last contact, per policy"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Review checklist 04-privacy, row 4 (GDPR Art. 5(1)(e))"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/O-1904> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-405> a edu:Knobit ;
    dcterms:identifier "S-405" ;
    rdfs:label "Recognises a third-country transfer with no safeguard"@en ;
    skos:prefLabel "Recognises a third-country transfer with no safeguard"@en ;
    skos:altLabel "Third-country transfer with no safeguard"@en ;
    skos:definition "A recipient outside the EEA with no adequacy or SCCs."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "transfer outside the EEA without adequacy or SCCs"@en ;
    edu:expectedResult "The transfer and the safeguard it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: PA-005 collections agency in a third country, `safeguard: null` Acceptable: SCCs (2021/914) with transfer impact assessment"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Review checklist 04-privacy, row 5 (GDPR Art. 44-46)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-454> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-406> a edu:Knobit ;
    dcterms:identifier "S-406" ;
    rdfs:label "Recognises high-risk processing with no DPIA"@en ;
    skos:prefLabel "Recognises high-risk processing with no DPIA"@en ;
    skos:altLabel "High-risk processing with no DPIA"@en ;
    skos:definition "Profiling or automated decisions with legal effect and no DPIA."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "profiling or automated decision without an impact assessment"@en ;
    edu:expectedResult "The processing and the DPIA it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: PA-003 automated credit scoring, `dpia: null` Acceptable: DPIA DI-001 with DPO advice"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Review checklist 04-privacy, row 6 (GDPR Art. 35; EDPB)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-453> ;
    edu:followedBy <https://knobit.org/id/knobit/S-433> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-407> a edu:Knobit ;
    dcterms:identifier "S-407" ;
    rdfs:label "Recognises a processor with no contract"@en ;
    skos:prefLabel "Recognises a processor with no contract"@en ;
    skos:altLabel "Processor with no contract"@en ;
    skos:definition "A processor listed with no Art. 28 contract reference."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "processor without an Art. 28 contract reference"@en ;
    edu:expectedResult "The processor and the contract it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: PA-005 recipient \"CollectCo\", `contract: null` Acceptable: Contract reference and date"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Review checklist 04-privacy, row 7 (GDPR Art. 28)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-454> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-408> a edu:Knobit ;
    dcterms:identifier "S-408" ;
    rdfs:label "Recognises further use with no compatibility assessment"@en ;
    skos:prefLabel "Recognises further use with no compatibility assessment"@en ;
    skos:altLabel "Further use with no compatibility assessment"@en ;
    skos:definition "Data from one purpose used for another with no assessment or own basis."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "data from one purpose reused for another"@en ;
    edu:expectedResult "The reuse and the assessment or basis it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: PA-004 pre-approved offers use PA-003 scoring results; no Art. 6(4) assessment Acceptable: Compatibility assessment, or consent for the marketing use"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Review checklist 04-privacy, row 8 (GDPR Art. 6(4), 5(1)(b))"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/O-1904> ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-451> ;
    edu:followedBy <https://knobit.org/id/knobit/S-432> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-409> a edu:Knobit ;
    dcterms:identifier "S-409" ;
    rdfs:label "Recognises an automated decision with no Art. 22 safeguards"@en ;
    skos:prefLabel "Recognises an automated decision with no Art. 22 safeguards"@en ;
    skos:altLabel "Automated decision with no Art. 22 safeguards"@en ;
    skos:definition "A decision with legal or similar effect made solely by automated means, no human review or contest."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "solely automated decision with legal effect and no human review"@en ;
    edu:expectedResult "The decision and the safeguards it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: PA-003 declines loans automatically; `human_review: false` Acceptable: Human review on request, explanation, contest route"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Review checklist 04-privacy, row 9 (GDPR Art. 22(3); EDPB WP251)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-453> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-410> a edu:Knobit ;
    dcterms:identifier "S-410" ;
    rdfs:label "Recognises an incomplete record of processing"@en ;
    skos:prefLabel "Recognises an incomplete record of processing"@en ;
    skos:altLabel "Record missing required Art. 30 content"@en ;
    skos:definition "Data subjects, categories, recipients or security measures empty."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "Art. 30 record with required content missing"@en ;
    edu:expectedResult "The record and the missing content"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: PA-006 `recipients: null`, `security_measures: null` Acceptable: All Art. 30(1) items filled"@en ;
    edu:assessmentMethod "Review of the stage 4 eval project (reffa/skills, data-security/evals)"@en ;
    dcterms:source "Review checklist 04-privacy, row 10 (GDPR Art. 30)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-455> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-431> a edu:Knobit ;
    dcterms:identifier "S-431" ;
    rdfs:label "Re-bases a processing purpose on the lawful basis the bank relies on"@en ;
    skos:prefLabel "Re-bases a processing purpose on the lawful basis the bank relies on"@en ;
    skos:definition "The record on the basis that fits - legal obligation and contract for creditworthiness - proposed to the DPO"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Re-bases"@en ;
    edu:targetObject "processing on a wrong lawful basis"@en ;
    edu:expectedResult "The record on the basis that fits - legal obligation and contract for creditworthiness - proposed to the DPO"@en ;
    edu:assessmentCriterion "The new basis fits the purpose and does not depend on consent the bank could not honour"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Graded on its own by dsec-privacy"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-451> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-432> a edu:Knobit ;
    dcterms:identifier "S-432" ;
    rdfs:label "Raises a further use of data for a compatibility assessment"@en ;
    skos:prefLabel "Raises a further use of data for a compatibility assessment"@en ;
    skos:definition "The reuse stopped or put to an Art. 6(4) assessment or its own basis, with the DPO"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Raises"@en ;
    edu:targetObject "reuse of data for a new purpose"@en ;
    edu:expectedResult "The reuse stopped or put to an Art. 6(4) assessment or its own basis, with the DPO"@en ;
    edu:assessmentCriterion "The reuse is not accepted on the original purpose's basis"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Graded on its own by dsec-privacy"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/O-1904> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-433> a edu:Knobit ;
    dcterms:identifier "S-433" ;
    rdfs:label "Proposes a DPIA with Art. 22 safeguards for automated decisions"@en ;
    skos:prefLabel "Proposes a DPIA with Art. 22 safeguards for automated decisions"@en ;
    skos:definition "A DPIA with human review, explanation and a contest route, for the DPO's advice"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Proposes"@en ;
    edu:targetObject "automated decision without assessment"@en ;
    edu:expectedResult "A DPIA with human review, explanation and a contest route, for the DPO's advice"@en ;
    edu:assessmentCriterion "The DPIA covers the decision's risks and the Art. 22(3) safeguards"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Graded on its own by dsec-privacy"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-453> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/G-532> a edu:Knobit ;
    dcterms:identifier "S-434" ;
    rdfs:label "Raises a decision for its owner instead of taking it"@en ;
    skos:prefLabel "Raises a decision for its owner instead of taking it"@en ;
    skos:definition "An open question to the holder of the decision right, with a proposal marked as such"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGeneratedAiEdited> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Raises"@en ;
    edu:targetObject "decision that belongs to another role"@en ;
    edu:expectedResult "An open question to the holder of the decision right, with a proposal marked as such"@en ;
    edu:assessmentCriterion "No open decision is taken; legal conclusions are proposals for the DPO and counsel"@en ;
    edu:assessmentMethod "skill-tests task: Retail lending records of processing (dsec-privacy)"@en ;
    dcterms:source "Graded on its own by dsec-privacy"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-451> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-451> a edu:Knobit ;
    dcterms:identifier "S-451" ;
    rdfs:label "Explains the lawful bases for processing"@en ;
    skos:prefLabel "Explains the lawful bases for processing"@en ;
    skos:definition "GDPR Art. 6(1): consent, contract, legal obligation, vital interests, public task, legitimate interest; consent is not the basis where the bank must process anyway (e.g. creditworthiness under consumer credit law)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "lawful bases"@en ;
    edu:expectedResult "GDPR Art. 6(1): consent, contract, legal obligation, vital interests, public task, legitimate interest; consent is not the basis where the bank must process anyway (e.g. creditworthiness under consumer credit law)."@en ;
    edu:assessmentCriterion "Answers a written question on the lawful bases correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 4 reference and review checklist rest on"@en ;
    edu:dependsOnKnobit <https://knobit.org/id/knobit/K12-70095> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/O-1904> a edu:Knobit ;
    dcterms:identifier "S-452" ;
    rdfs:label "Explains purpose limitation, minimisation and storage limitation"@en ;
    skos:prefLabel "Explains purpose limitation, minimisation and storage limitation"@en ;
    skos:definition "GDPR Art. 5(1)(b), (c), (e) and the compatibility test for further use (Art. 6(4))."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "processing principles"@en ;
    edu:expectedResult "GDPR Art. 5(1)(b), (c), (e) and the compatibility test for further use (Art. 6(4))."@en ;
    edu:assessmentCriterion "Answers a written question on the processing principles correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 4 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-453> a edu:Knobit ;
    dcterms:identifier "S-453" ;
    rdfs:label "Explains DPIA triggers and automated decisions"@en ;
    skos:prefLabel "Explains DPIA triggers and automated decisions"@en ;
    skos:definition "DPIA for processing likely to result in high risk - profiling, automated decisions with legal effect (GDPR Art. 35; WP248 rev.01); Art. 22(3) safeguards: human intervention, expressing a view, contesting."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "DPIA and automated decisions"@en ;
    edu:expectedResult "DPIA for processing likely to result in high risk - profiling, automated decisions with legal effect (GDPR Art. 35; WP248 rev.01); Art. 22(3) safeguards: human intervention, expressing a view, contesting."@en ;
    edu:assessmentCriterion "Answers a written question on the DPIA and automated decisions correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 4 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-454> a edu:Knobit ;
    dcterms:identifier "S-454" ;
    rdfs:label "Explains processors and international transfers"@en ;
    skos:prefLabel "Explains processors and international transfers"@en ;
    skos:definition "Processors under an Art. 28 contract; transfers outside the EEA under adequacy or appropriate safeguards (Arts. 44-46)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "processors and transfers"@en ;
    edu:expectedResult "Processors under an Art. 28 contract; transfers outside the EEA under adequacy or appropriate safeguards (Arts. 44-46)."@en ;
    edu:assessmentCriterion "Answers a written question on the processors and transfers correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 4 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-455> a edu:Knobit ;
    dcterms:identifier "S-455" ;
    rdfs:label "Explains the record of processing activities"@en ;
    skos:prefLabel "Explains the record of processing activities"@en ;
    skos:definition "GDPR Art. 30(1) content: controller, purposes, data subjects and data categories, recipients, transfers, retention, security measures."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "record of processing activities"@en ;
    edu:expectedResult "GDPR Art. 30(1) content: controller, purposes, data subjects and data categories, recipients, transfers, retention, security measures."@en ;
    edu:assessmentCriterion "Answers a written question on the record of processing activities correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 4 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-501> a edu:Knobit ;
    dcterms:identifier "S-501" ;
    rdfs:label "Recognises privileged access not logged"@en ;
    skos:prefLabel "Recognises privileged access not logged"@en ;
    skos:altLabel "Privileged access not logged"@en ;
    skos:definition "A privileged role with no log source covering its sessions."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "privileged or break-glass sessions no log source covers"@en ;
    edu:expectedResult "The role and the log source it needs"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RL-006 DBA: no log source lists `privileged_login` for AS-001 Acceptable: LS for DBA sessions on every database"@en ;
    edu:assessmentMethod "skill-tests task: Cardholder data environment logging and access review (dsec-monitoring-audit)"@en ;
    dcterms:source "Review checklist 05-monitoring-audit, row 1 (27002 8.15; PCI 10.2.1.2)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-551> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-502> a edu:Knobit ;
    dcterms:identifier "S-502" ;
    rdfs:label "Recognises an access recertification by the holder"@en ;
    skos:prefLabel "Recognises an access recertification by the holder"@en ;
    skos:altLabel "Recertification by the holder"@en ;
    skos:definition "The reviewer holds the access under review."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "review signed by a person holding the access reviewed"@en ;
    edu:expectedResult "The campaign and an independent reviewer"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RC-002 PAY_APPROVE reviewed by the Head of Payments, who holds PAY_APPROVE Acceptable: Reviewed by the COO, or by the holders' managers excluding themselves"@en ;
    edu:assessmentMethod "skill-tests task: Cardholder data environment logging and access review (dsec-monitoring-audit)"@en ;
    dcterms:source "Review checklist 05-monitoring-audit, row 2 (27002 5.18; 5.3)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-552> ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/G-255> ;
    edu:followedBy <https://knobit.org/id/knobit/S-533> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-503> a edu:Knobit ;
    dcterms:identifier "S-503" ;
    rdfs:label "Recognises a log nobody reviews"@en ;
    skos:prefLabel "Recognises a log nobody reviews"@en ;
    skos:altLabel "Log nobody reviews"@en ;
    skos:definition "A log source with no reviewer or review frequency."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "log source without reviewer or review frequency"@en ;
    edu:expectedResult "The log and its reviewer"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: LS-003 card management access log, `reviewed_by: null` Acceptable: SOC, daily, with escalation"@en ;
    edu:assessmentMethod "Review of the stage 5 eval project (reffa/skills, data-security/evals)"@en ;
    dcterms:source "Review checklist 05-monitoring-audit, row 3 (27002 8.16; PCI 10.4.1)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-551> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-504> a edu:Knobit ;
    dcterms:identifier "S-504" ;
    rdfs:label "Recognises log retention shorter than required"@en ;
    skos:prefLabel "Recognises log retention shorter than required"@en ;
    skos:altLabel "Retention shorter than required"@en ;
    skos:definition "Logs kept less than the requirement in scope."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "log kept less than the requirement in scope"@en ;
    edu:expectedResult "The log and the retention the requirement sets"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: LS-002 cardholder data access log kept 90 days Acceptable: 12 months, 3 immediately available (PCI DSS 10.5.1)"@en ;
    edu:assessmentMethod "skill-tests task: Cardholder data environment logging and access review (dsec-monitoring-audit)"@en ;
    dcterms:source "Review checklist 05-monitoring-audit, row 4 (PCI 10.5.1)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-553> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-505> a edu:Knobit ;
    dcterms:identifier "S-505" ;
    rdfs:label "Recognises logs the recorded people can alter"@en ;
    skos:prefLabel "Recognises logs the recorded people can alter"@en ;
    skos:altLabel "Logs the recorded people can alter"@en ;
    skos:definition "Logs writable by the administrators they record."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "audit log writable by the administrators it records"@en ;
    edu:expectedResult "The log and a store its subjects cannot change"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: LS-001 DBA audit table in the same database, DBAs have write Acceptable: Shipped to a SIEM the DBAs cannot change"@en ;
    edu:assessmentMethod "skill-tests task: Cardholder data environment logging and access review (dsec-monitoring-audit)"@en ;
    dcterms:source "Review checklist 05-monitoring-audit, row 5 (27002 8.15; PCI 10.3.2)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-551> ;
    edu:followedBy <https://knobit.org/id/knobit/S-531> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-506> a edu:Knobit ;
    dcterms:identifier "S-506" ;
    rdfs:label "Recognises a monitoring rule with no threshold or response"@en ;
    skos:prefLabel "Recognises a monitoring rule with no threshold or response"@en ;
    skos:altLabel "Monitoring rule with no threshold or response"@en ;
    skos:definition "An event watched with no trigger or no action."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "watched event without trigger or action"@en ;
    edu:expectedResult "The rule and its threshold and responder"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: MR-002 \"bulk reads of customer data\", `threshold: null`, `response: null` Acceptable: > 10 000 rows in an hour -> SOC ticket within 1 hour"@en ;
    edu:assessmentMethod "skill-tests task: Cardholder data environment logging and access review (dsec-monitoring-audit)"@en ;
    dcterms:source "Review checklist 05-monitoring-audit, row 6 (27002 8.16; DORA)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-551> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-507> a edu:Knobit ;
    dcterms:identifier "S-507" ;
    rdfs:label "Recognises an overdue recertification"@en ;
    skos:prefLabel "Recognises an overdue recertification"@en ;
    skos:altLabel "Recertification overdue"@en ;
    skos:definition "Last run older than its frequency."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "campaign whose last run is older than its frequency"@en ;
    edu:expectedResult "The campaign and the run due"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RC-003 ANALYST quarterly, last run 2025-11 Acceptable: Run within the quarter"@en ;
    edu:assessmentMethod "Review of the stage 5 eval project (reffa/skills, data-security/evals)"@en ;
    dcterms:source "Review checklist 05-monitoring-audit, row 7 (27002 5.18; PCI 7.2.4)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-552> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-508> a edu:Knobit ;
    dcterms:identifier "S-508" ;
    rdfs:label "Recognises privileged access outside recertification"@en ;
    skos:prefLabel "Recognises privileged access outside recertification"@en ;
    skos:altLabel "Privileged or restricted access outside recertification"@en ;
    skos:definition "A role with privileges or restricted reads in no campaign."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "privileged or restricted-data role in no campaign"@en ;
    edu:expectedResult "The role and the campaign to include it in"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RL-009 SVC_REPORTING in no RC Acceptable: Included, or retired"@en ;
    edu:assessmentMethod "Review of the stage 5 eval project (reffa/skills, data-security/evals)"@en ;
    dcterms:source "Review checklist 05-monitoring-audit, row 8 (27002 5.18)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-552> ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-354> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-509> a edu:Knobit ;
    dcterms:identifier "S-509" ;
    rdfs:label "Recognises restricted reads not logged"@en ;
    skos:prefLabel "Recognises restricted reads not logged"@en ;
    skos:altLabel "Reads of restricted data not logged"@en ;
    skos:definition "Restricted columns read with no read event logged."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "reads of restricted columns with no read event"@en ;
    edu:expectedResult "The reads and the logging they need"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: `card.pan` reads by the card service not logged Acceptable: Read events for restricted columns, at least by role"@en ;
    edu:assessmentMethod "skill-tests task: Cardholder data environment logging and access review (dsec-monitoring-audit)"@en ;
    dcterms:source "Review checklist 05-monitoring-audit, row 9 (PCI 10.2.1.1; 27002 8.15)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-551> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-510> a edu:Knobit ;
    dcterms:identifier "S-510" ;
    rdfs:label "Recognises rejected access still active"@en ;
    skos:prefLabel "Recognises rejected access still active"@en ;
    skos:altLabel "Recertification results not acted on"@en ;
    skos:definition "Rejected access still active after the campaign."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/resultEvaluation> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Recognises"@en ;
    edu:targetObject "access a review rejected or did not confirm, still granted"@en ;
    edu:expectedResult "The grants and their revocation"@en ;
    edu:assessmentCriterion "Flags the deficient case and passes the acceptable one. Deficient: RC-001 rejected 4 TELLER grants in July; 3 still active in October Acceptable: Revoked within 5 working days, with evidence"@en ;
    edu:assessmentMethod "skill-tests task: Cardholder data environment logging and access review (dsec-monitoring-audit)"@en ;
    dcterms:source "Review checklist 05-monitoring-audit, row 10 (27002 5.18; DMBOK)"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-552> ;
    edu:followedBy <https://knobit.org/id/knobit/S-532> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-531> a edu:Knobit ;
    dcterms:identifier "S-531" ;
    rdfs:label "Separates log integrity from the people logged"@en ;
    skos:prefLabel "Separates log integrity from the people logged"@en ;
    skos:definition "Logs shipped to a store the recorded administrators cannot change or delete"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Separates"@en ;
    edu:targetObject "audit log its subjects can alter"@en ;
    edu:expectedResult "Logs shipped to a store the recorded administrators cannot change or delete"@en ;
    edu:assessmentCriterion "No person recorded in a log can alter or truncate it"@en ;
    edu:assessmentMethod "skill-tests task: Cardholder data environment logging and access review (dsec-monitoring-audit)"@en ;
    dcterms:source "Graded on its own by dsec-monitoring-audit"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-551> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-532> a edu:Knobit ;
    dcterms:identifier "S-532" ;
    rdfs:label "Revokes access a review did not confirm"@en ;
    skos:prefLabel "Revokes access a review did not confirm"@en ;
    skos:definition "Unconfirmed grants revoked, with evidence, re-granted only on a new request"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Revokes"@en ;
    edu:targetObject "unconfirmed access after a review"@en ;
    edu:expectedResult "Unconfirmed grants revoked, with evidence, re-granted only on a new request"@en ;
    edu:assessmentCriterion "Unconfirmed is treated as rejected, not as kept"@en ;
    edu:assessmentMethod "skill-tests task: Cardholder data environment logging and access review (dsec-monitoring-audit)"@en ;
    dcterms:source "Graded on its own by dsec-monitoring-audit"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-552> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-533> a edu:Knobit ;
    dcterms:identifier "S-533" ;
    rdfs:label "Assigns an independent reviewer to an access recertification"@en ;
    skos:prefLabel "Assigns an independent reviewer to an access recertification"@en ;
    skos:definition "A reviewer who does not hold the access - the owner's manager or the role owner excluding themselves"@en ;
    edu:knobitType <https://knobit.org/def/knobitType/skill> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/actionExecution> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Assigns"@en ;
    edu:targetObject "self-reviewed access recertification"@en ;
    edu:expectedResult "A reviewer who does not hold the access - the owner's manager or the role owner excluding themselves"@en ;
    edu:assessmentCriterion "No reviewer certifies access they hold"@en ;
    edu:assessmentMethod "skill-tests task: Cardholder data environment logging and access review (dsec-monitoring-audit)"@en ;
    dcterms:source "Graded on its own by dsec-monitoring-audit"@en ;
    edu:appliesKnowledge <https://knobit.org/id/knobit/S-552> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-551> a edu:Knobit ;
    dcterms:identifier "S-551" ;
    rdfs:label "Explains logging and monitoring of data access"@en ;
    skos:prefLabel "Explains logging and monitoring of data access"@en ;
    skos:definition "Who, what, when, from where and the result for every privileged action and restricted read; protected logs; reviewed; rules with thresholds and responders (ISO/IEC 27002:2022 8.15, 8.16; PCI DSS v4.0.1 Req. 10; DORA Art. 10)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "logging and monitoring"@en ;
    edu:expectedResult "Who, what, when, from where and the result for every privileged action and restricted read; protected logs; reviewed; rules with thresholds and responders (ISO/IEC 27002:2022 8.15, 8.16; PCI DSS v4.0.1 Req. 10; DORA Art. 10)."@en ;
    edu:assessmentCriterion "Answers a written question on the logging and monitoring correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 5 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-552> a edu:Knobit ;
    dcterms:identifier "S-552" ;
    rdfs:label "Explains access recertification"@en ;
    skos:prefLabel "Explains access recertification"@en ;
    skos:definition "Periodic review of access rights by someone other than the holder, with unconfirmed access revoked (ISO/IEC 27002:2022 5.18; PCI DSS v4.0.1 Req. 7.2.4)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "access recertification"@en ;
    edu:expectedResult "Periodic review of access rights by someone other than the holder, with unconfirmed access revoked (ISO/IEC 27002:2022 5.18; PCI DSS v4.0.1 Req. 7.2.4)."@en ;
    edu:assessmentCriterion "Answers a written question on the access recertification correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 5 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-553> a edu:Knobit ;
    dcterms:identifier "S-553" ;
    rdfs:label "Explains PCI DSS audit log retention"@en ;
    skos:prefLabel "Explains PCI DSS audit log retention"@en ;
    skos:definition "Audit log history retained for at least 12 months, with at least the most recent three months immediately available for analysis (PCI DSS v4.0.1 Req. 10.5.1)."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "PCI DSS log retention"@en ;
    edu:expectedResult "Audit log history retained for at least 12 months, with at least the most recent three months immediately available for analysis (PCI DSS v4.0.1 Req. 10.5.1)."@en ;
    edu:assessmentCriterion "Answers a written question on the PCI DSS log retention correctly"@en ;
    edu:assessmentMethod "Written question"@en ;
    dcterms:source "Practice the stage 5 reference and review checklist rest on"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-901> a edu:Knobit ;
    dcterms:identifier "S-901" ;
    rdfs:label "Explains the drivers and goals of data security"@en ;
    skos:prefLabel "Explains the drivers and goals of data security"@en ;
    skos:definition "Risk reduction and business growth; protecting data assets in line with privacy and confidentiality regulations, contractual agreements and business requirements."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "drivers of data security"@en ;
    edu:expectedResult "Risk reduction and business growth; protecting data assets in line with privacy and confidentiality regulations, contractual agreements and business requirements."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the drivers of data security"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-9"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-902> a edu:Knobit ;
    dcterms:identifier "S-902" ;
    rdfs:label "Explains vulnerability, threat and risk"@en ;
    skos:prefLabel "Explains vulnerability, threat and risk"@en ;
    skos:definition "Vulnerabilities, threats, risk and risk classifications, and assessing current security risks."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "security risk concepts"@en ;
    edu:expectedResult "Vulnerabilities, threats, risk and risk classifications, and assessing current security risks."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the security risk concepts"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-10"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-903> a edu:Knobit ;
    dcterms:identifier "S-903" ;
    rdfs:label "Explains the data security organisation"@en ;
    skos:prefLabel "Explains the data security organisation"@en ;
    skos:definition "Roles of information security, data governance, IT and the business in data security."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "data security organisation"@en ;
    edu:expectedResult "Roles of information security, data governance, IT and the business in data security."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the data security organisation"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-11"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-904> a edu:Knobit ;
    dcterms:identifier "S-904" ;
    rdfs:label "Explains data integrity as a security concern"@en ;
    skos:prefLabel "Explains data integrity as a security concern"@en ;
    skos:definition "Protecting data from improper alteration."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "data integrity"@en ;
    edu:expectedResult "Protecting data from improper alteration."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the data integrity"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-12"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-905> a edu:Knobit ;
    dcterms:identifier "S-905" ;
    rdfs:label "Explains encryption types"@en ;
    skos:prefLabel "Explains encryption types"@en ;
    skos:definition "Hashing, symmetric (private-key) and public-key encryption."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "encryption"@en ;
    edu:expectedResult "Hashing, symmetric (private-key) and public-key encryption."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the encryption"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-13"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-906> a edu:Knobit ;
    dcterms:identifier "S-906" ;
    rdfs:label "Explains network and device security terms"@en ;
    skos:prefLabel "Explains network and device security terms"@en ;
    skos:definition "Backdoors, bots, cookies, firewalls, perimeters, DMZs, super users, keyloggers, penetration testing, VPNs."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "network security"@en ;
    edu:expectedResult "Backdoors, bots, cookies, firewalls, perimeters, DMZs, super users, keyloggers, penetration testing, VPNs."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the network security"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-14"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-907> a edu:Knobit ;
    dcterms:identifier "S-907" ;
    rdfs:label "Explains the types of data security"@en ;
    skos:prefLabel "Explains the types of data security"@en ;
    skos:definition "Facility, device, credential, document and content security."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "types of data security"@en ;
    edu:expectedResult "Facility, device, credential, document and content security."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the types of data security"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-15"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-908> a edu:Knobit ;
    dcterms:identifier "S-908" ;
    rdfs:label "Explains system security risks"@en ;
    skos:prefLabel "Explains system security risks"@en ;
    skos:definition "Abuse of excessive or legitimate privilege, unauthorised privilege elevation, service account abuse, platform intrusion, SQL injection, default passwords, backup data abuse."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "system security risks"@en ;
    edu:expectedResult "Abuse of excessive or legitimate privilege, unauthorised privilege elevation, service account abuse, platform intrusion, SQL injection, default passwords, backup data abuse."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the system security risks"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-16"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-909> a edu:Knobit ;
    dcterms:identifier "S-909" ;
    rdfs:label "Explains hacking, social threats and malware"@en ;
    skos:prefLabel "Explains hacking, social threats and malware"@en ;
    skos:definition "Hacking, phishing and social engineering, malware."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "attack types"@en ;
    edu:expectedResult "Hacking, phishing and social engineering, malware."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the attack types"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-17"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-910> a edu:Knobit ;
    dcterms:identifier "S-910" ;
    rdfs:label "Explains data security policy and standards"@en ;
    skos:prefLabel "Explains data security policy and standards"@en ;
    skos:definition "Defining the policy and the standards (confidentiality levels, regulatory categories, roles) it rests on."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "data security policy"@en ;
    edu:expectedResult "Defining the policy and the standards (confidentiality levels, regulatory categories, roles) it rests on."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the data security policy"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-18"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-911> a edu:Knobit ;
    dcterms:identifier "S-911" ;
    rdfs:label "Explains data security tools"@en ;
    skos:prefLabel "Explains data security tools"@en ;
    skos:definition "Anti-virus, HTTPS, identity management, intrusion detection and prevention, firewalls, metadata tracking, masking."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "data security tools"@en ;
    edu:expectedResult "Anti-virus, HTTPS, identity management, intrusion detection and prevention, firewalls, metadata tracking, masking."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the data security tools"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-19"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-912> a edu:Knobit ;
    dcterms:identifier "S-912" ;
    rdfs:label "Explains data security techniques"@en ;
    skos:prefLabel "Explains data security techniques"@en ;
    skos:definition "CRUD matrix usage, immediate patching, security attributes in metadata, security needs in project requirements, efficient search of encrypted data, document sanitisation."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "data security techniques"@en ;
    edu:expectedResult "CRUD matrix usage, immediate patching, security attributes in metadata, security needs in project requirements, efficient search of encrypted data, document sanitisation."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the data security techniques"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-20"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-913> a edu:Knobit ;
    dcterms:identifier "S-913" ;
    rdfs:label "Explains data security implementation"@en ;
    skos:prefLabel "Explains data security implementation"@en ;
    skos:definition "Readiness and risk assessment, cultural change, visibility of entitlements, outsourcing and cloud."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "data security implementation"@en ;
    edu:expectedResult "Readiness and risk assessment, cultural change, visibility of entitlements, outsourcing and cloud."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the data security implementation"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-21"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/S-914> a edu:Knobit ;
    dcterms:identifier "S-914" ;
    rdfs:label "Explains data security metrics"@en ;
    skos:prefLabel "Explains data security metrics"@en ;
    skos:definition "Security implementation, performance and risk metrics."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGenerated> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "data security metrics"@en ;
    edu:expectedResult "Security implementation, performance and risk metrics."@en ;
    edu:assessmentCriterion "Answers a CDMP-style multiple-choice question on the data security metrics"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, element SV-22"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/K12-70093> a edu:Knobit ;
    dcterms:identifier "S-1801" ;
    rdfs:label "Distinguishes personal data from special categories of personal data"@en ;
    skos:prefLabel "Distinguishes personal data from special categories of personal data"@en ;
    skos:altLabel "Eristab isikuandmeid ja eriliigilisi isikuandmeid"@en ;
    skos:definition "Tells ordinary from special categories of personal data in the sense of the Personal Data Protection Act; does not cover the principles of processing."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGeneratedAiEdited> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Distinguishes"@en ;
    edu:targetObject "personal data and special categories of personal data"@en ;
    edu:expectedResult "A distinction between personal data and special categories of personal data, with an example"@en ;
    edu:assessmentCriterion "Classifies the given kinds of data correctly and justifies the classification"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "Copy of k12 knobit K12-70093 of the Estonian national curriculum register grok-l9-informaatika-2 (product k12-curriculum, skills/knobits/k12/grok-l9-informaatika-2.yaml), GRÕK lisa 9, informaatika, Digitaalne jalajälg, õpitulemus 6 (LO-70032, rida 736); fingerprint translated from Estonian"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/K12-69062> a edu:Knobit ;
    dcterms:identifier "S-1802" ;
    rdfs:label "Explains how database tables and relationships are structured"@en ;
    skos:prefLabel "Explains how database tables and relationships are structured"@en ;
    skos:altLabel "Selgitab andmebaasi tabelite ja seoste ülesehitust"@en ;
    skos:definition "Explains the structure of a relational database; does not cover creating a database."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGeneratedAiEdited> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "the structure of a database (table, column, primary key, relationship)"@en ;
    edu:expectedResult "An explanation of the structure of a database, with an example"@en ;
    edu:assessmentCriterion "Explains the meaning of a table, a column, a primary key and a relationship, and draws a simple two-table schema"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "Copy of k12 knobit K12-69062 of the Estonian national curriculum register grok-l9-informaatika-1 (product k12-curriculum, skills/knobits/k12/grok-l9-informaatika-1.yaml), GRÕK lisa 9, Informaatika, Tarkvaraarendus, LO-69021; fingerprint translated from Estonian"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/K12-70095> a edu:Knobit ;
    dcterms:identifier "S-1803" ;
    rdfs:label "Explains the legal bases for processing personal data"@en ;
    skos:prefLabel "Explains the legal bases for processing personal data"@en ;
    skos:altLabel "Selgitab isikuandmete töötlemise õiguslikke aluseid"@en ;
    skos:definition "Explains when personal data may be processed; does not cover the principles of processing."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGeneratedAiEdited> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "the legal bases for processing personal data (consent, contract, legal obligation, legitimate interest)"@en ;
    edu:expectedResult "An explanation of the legal bases, with an example"@en ;
    edu:assessmentCriterion "Names at least three bases and matches a given situation with the right basis"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "Copy of k12 knobit K12-70095 of the Estonian national curriculum register grok-l9-informaatika-2 (product k12-curriculum, skills/knobits/k12/grok-l9-informaatika-2.yaml), GRÕK lisa 9, informaatika, Digitaalne jalajälg, õpitulemus 6 (LO-70032, rida 736); fingerprint translated from Estonian"@en ;
    edu:dependsOnKnobit <https://knobit.org/id/knobit/K12-70093> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/G-1901> a edu:Knobit ;
    dcterms:identifier "S-1901" ;
    rdfs:label "Explains the kinds of rules binding an organisation's data and where they are published"@en ;
    skos:prefLabel "Explains the kinds of rules binding an organisation's data and where they are published"@en ;
    skos:definition "Legal acts by kind and legal force (constitution, act, regulation; EU regulations apply directly, directives through national acts; international agreements), published in Riigi Teataja and EUR-Lex; supervisory guidance and contractual standards (PCI DSS) bind differently and are told apart from law."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGeneratedAiEdited> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:actionVerb "Explains"@en ;
    edu:targetObject "kinds of rules binding an organisation's data and where they are published"@en ;
    edu:expectedResult "The kinds told apart by legal force and place of publication, with supervisory guidance and contractual standards told apart from legal acts"@en ;
    edu:assessmentCriterion "Classifies a requirement's source as a legal act (and of which kind), supervisory guidance or a contractual standard, and names where the act is published"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "Shared-URI copy of data-governance G-1901, for activity SV-1 (k12-dmbok part B candidate, accepted by Peep Küngas on 31 Oct 2026)"@en ;
    edu:dependsOnKnobit <https://knobit.org/id/knobit/K12-57100> ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/knobit/K12-57100> a edu:Knobit ;
    dcterms:identifier "S-1804" ;
    rdfs:label "Distinguishes the kinds of legal texts and where to find them"@en ;
    skos:prefLabel "Distinguishes the kinds of legal texts and where to find them"@en ;
    skos:altLabel "Eristab õigustekstide liike ja leidmiskohti"@en ;
    skos:definition "Tells what the constitution, an act, a regulation and an international agreement are, and where they are found."@en ;
    edu:knobitType <https://knobit.org/def/knobitType/knowledge> ;
    edu:contextFunction <https://knobit.org/def/contextFunction/objectUnderstanding> ;
    edu:creationMethod <https://knobit.org/def/creationMethod/aiGeneratedAiEdited> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/outcomeContent> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/taskSelection> ;
    edu:actionVerb "Distinguishes"@en ;
    edu:targetObject "kinds of legal texts (constitution, act, regulation, international agreement) and where they are published (Riigi Teataja, EUR-Lex)"@en ;
    edu:expectedResult "The kinds of legal texts told apart, with where each is found"@en ;
    edu:assessmentCriterion "Matches a kind of legal act with the right place of publication and the right order of legal force"@en ;
    edu:assessmentMethod "Multiple-choice question"@en ;
    dcterms:source "Copy of k12 knobit K12-57100 of the Estonian national curriculum register grok-l6-uhiskonnaopetus (product k12-curriculum, skills/knobits/k12/grok-l6-uhiskonnaopetus.yaml), GRÕK lisa 6, ühiskonnaõpetus, 2.3.3 Kommunikatsioon, infopädevus, õpitulemus 3; fingerprint translated from Estonian"@en ;
    schema:creativeWorkStatus "accepted" ;
    schema:isPartOf <https://knobit.org/id/register/data-security> ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> .

<https://knobit.org/id/outcome/SO-1> a edu:LearningOutcome ;
    dcterms:identifier "SO-1" ;
    rdfs:label "Draws requirements from the regulations in force and follows their data to every copy"@en ;
    dcterms:description "Stage 1 of the data-security skill: Draws requirements from the regulations in force and follows their data to every copy; produces 01-requirements/requirements-register.yaml."@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-101> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-102> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-103> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-104> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-105> ;
    edu:includesKnobit <https://knobit.org/id/knobit/G-403> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-107> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-108> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-109> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-110> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-131> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-132> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-151> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-152> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-153> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-154> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-155> .

<https://knobit.org/id/outcome/SO-2> a edu:LearningOutcome ;
    dcterms:identifier "SO-2" ;
    rdfs:label "Classifies every column, derived ones included, at the level its data demands"@en ;
    dcterms:description "Stage 2 of the data-security skill: Classifies every column, derived ones included, at the level its data demands; produces 02-classification/classification.yaml."@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-201> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-202> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-203> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-204> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-205> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-206> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-207> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-208> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-209> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-210> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-211> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-231> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-251> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-252> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-253> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-254> .

<https://knobit.org/id/outcome/SO-3> a edu:LearningOutcome ;
    dcterms:identifier "SO-3" ;
    rdfs:label "Designs access by need, with duties segregated and masking that holds"@en ;
    dcterms:description "Stage 3 of the data-security skill: Designs access by need, with duties segregated and masking that holds; produces 03-access/access-model.yaml."@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-301> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-302> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-303> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-304> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-305> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-306> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-307> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-308> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-309> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-310> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-311> ;
    edu:includesKnobit <https://knobit.org/id/knobit/K-821> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-331> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-332> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-333> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-351> ;
    edu:includesKnobit <https://knobit.org/id/knobit/G-255> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-353> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-354> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-355> .

<https://knobit.org/id/outcome/SO-4> a edu:LearningOutcome ;
    dcterms:identifier "SO-4" ;
    rdfs:label "Records processing per purpose on the right basis, with DPIAs where risk is high"@en ;
    dcterms:description "Stage 4 of the data-security skill: Records processing per purpose on the right basis, with DPIAs where risk is high; produces 04-privacy/privacy-register.yaml."@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-401> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-402> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-403> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-404> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-405> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-406> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-407> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-408> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-409> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-410> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-431> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-432> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-433> ;
    edu:includesKnobit <https://knobit.org/id/knobit/G-532> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-451> ;
    edu:includesKnobit <https://knobit.org/id/knobit/O-1904> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-453> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-454> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-455> .

<https://knobit.org/id/outcome/SO-5> a edu:LearningOutcome ;
    dcterms:identifier "SO-5" ;
    rdfs:label "Monitors access with logs its subjects cannot alter and recertifications its holders do not sign"@en ;
    dcterms:description "Stage 5 of the data-security skill: Monitors access with logs its subjects cannot alter and recertifications its holders do not sign; produces 05-monitoring/monitoring.yaml."@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-501> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-502> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-503> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-504> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-505> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-506> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-507> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-508> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-509> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-510> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-531> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-532> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-533> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-551> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-552> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-553> .

<https://knobit.org/id/register/data-security#SE-101> a edu:Question ;
    dcterms:identifier "SE-101" ;
    rdfs:label "dsec-regulatory-requirements C1: PCI DSS cited for IBAN encryption"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-102> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-102> a edu:Question ;
    dcterms:identifier "SE-102" ;
    rdfs:label "dsec-regulatory-requirements C1: the PAN copy in the warehouse is outside RQ-004's scope"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-108> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-103> a edu:Question ;
    dcterms:identifier "SE-103" ;
    rdfs:label "dsec-regulatory-requirements C1: what the copy brings into PCI DSS scope"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-131> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-104> a edu:Question ;
    dcterms:identifier "SE-104" ;
    rdfs:label "dsec-regulatory-requirements C2: erasure against AML retention"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-110> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-105> a edu:Question ;
    dcterms:identifier "SE-105" ;
    rdfs:label "dsec-regulatory-requirements C2: the conflict raised with the DPO under Art. 17(3)(b)"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-132> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-106> a edu:Question ;
    dcterms:identifier "SE-106" ;
    rdfs:label "dsec-regulatory-requirements I1: RQ-002 has no control"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-101> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-107> a edu:Question ;
    dcterms:identifier "SE-107" ;
    rdfs:label "dsec-regulatory-requirements I1: RQ-006 has no data scope"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-103> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-108> a edu:Question ;
    dcterms:identifier "SE-108" ;
    rdfs:label "dsec-regulatory-requirements I1: RQ-005 cites a requirement PCI DSS does not have"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-104> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-109> a edu:Question ;
    dcterms:identifier "SE-109" ;
    rdfs:label "dsec-regulatory-requirements I1: CT-006 has no owner"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-105> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-110> a edu:Question ;
    dcterms:identifier "SE-110" ;
    rdfs:label "dsec-regulatory-requirements I1: CT-007 has no evidence"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/G-403> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-111> a edu:Question ;
    dcterms:identifier "SE-111" ;
    rdfs:label "dsec-regulatory-requirements I1: DORA produced no requirements"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-107> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-112> a edu:Question ;
    dcterms:identifier "SE-112" ;
    rdfs:label "dsec-regulatory-requirements I2: the nightly CVV purge cannot meet Req. 3.3.1"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-109> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-201> a edu:Question ;
    dcterms:identifier "SE-201" ;
    rdfs:label "dsec-classification C1: the full PAN in the analytics table is classified internal"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-201> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-202> a edu:Question ;
    dcterms:identifier "SE-202" ;
    rdfs:label "dsec-classification C1: the analytics table and its consumers enter PCI DSS scope, its derived columns inherit"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-131> , <https://knobit.org/id/knobit/S-231> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-203> a edu:Question ;
    dcterms:identifier "SE-203" ;
    rdfs:label "dsec-classification C2: the hashed personal code is pseudonymous, not anonymous"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-207> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-204> a edu:Question ;
    dcterms:identifier "SE-204" ;
    rdfs:label "dsec-classification C2: the merchant-by-day aggregate has cells of one customer"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-203> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-205> a edu:Question ;
    dcterms:identifier "SE-205" ;
    rdfs:label "dsec-classification I1: a CVV column is stored"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-205> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-206> a edu:Question ;
    dcterms:identifier "SE-206" ;
    rdfs:label "dsec-classification I1: the personal code is below its category's minimum"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-206> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-207> a edu:Question ;
    dcterms:identifier "SE-207" ;
    rdfs:label "dsec-classification I1: the employer name is unclassified"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-204> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-208> a edu:Question ;
    dcterms:identifier "SE-208" ;
    rdfs:label "dsec-classification I1: hardship notes hold health data"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-208> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-209> a edu:Question ;
    dcterms:identifier "SE-209" ;
    rdfs:label "dsec-classification I2: first six and last six is not a truncation"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-209> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-210> a edu:Question ;
    dcterms:identifier "SE-210" ;
    rdfs:label "dsec-classification I2: birth date below its source"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-202> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-211> a edu:Question ;
    dcterms:identifier "SE-211" ;
    rdfs:label "dsec-classification I2: IBAN classified differently in the physical model"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-210> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-212> a edu:Question ;
    dcterms:identifier "SE-212" ;
    rdfs:label "dsec-classification I2: restricted has no handling rules"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-211> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-301> a edu:Question ;
    dcterms:identifier "SE-301" ;
    rdfs:label "dsec-access-control C1: the analyst's masked personal code is joinable to the clear customer table"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-304> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-302> a edu:Question ;
    dcterms:identifier "SE-302" ;
    rdfs:label "dsec-access-control C1: the join path closed"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-332> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-303> a edu:Question ;
    dcterms:identifier "SE-303" ;
    rdfs:label "dsec-access-control C2: the payments operator can create and approve"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-302> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-304> a edu:Question ;
    dcterms:identifier "SE-304" ;
    rdfs:label "dsec-access-control C2: the conflict split into roles, not only monitored"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-331> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-305> a edu:Question ;
    dcterms:identifier "SE-305" ;
    rdfs:label "dsec-access-control I1: teller row security on an updatable branch code"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-305> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-306> a edu:Question ;
    dcterms:identifier "SE-306" ;
    rdfs:label "dsec-access-control I1: the DBA role is not logged"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-306> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-307> a edu:Question ;
    dcterms:identifier "SE-307" ;
    rdfs:label "dsec-access-control I1: break-glass has no expiry"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-307> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-308> a edu:Question ;
    dcterms:identifier "SE-308" ;
    rdfs:label "dsec-access-control I1: a role has no owner"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-308> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-309> a edu:Question ;
    dcterms:identifier "SE-309" ;
    rdfs:label "dsec-access-control I2: the analyst can export the full customer list"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-301> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-310> a edu:Question ;
    dcterms:identifier "SE-310" ;
    rdfs:label "dsec-access-control I2: the DBA reads personal codes"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-309> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-311> a edu:Question ;
    dcterms:identifier "SE-311" ;
    rdfs:label "dsec-access-control I2: a shared privileged reporting account"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-311> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-312> a edu:Question ;
    dcterms:identifier "SE-312" ;
    rdfs:label "dsec-access-control Q1: least privilege with every duty still covered"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-333> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-401> a edu:Question ;
    dcterms:identifier "SE-401" ;
    rdfs:label "dsec-privacy C1: consent named for creditworthiness assessment"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-401> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-402> a edu:Question ;
    dcterms:identifier "SE-402" ;
    rdfs:label "dsec-privacy C1: creditworthiness re-based on legal obligation and contract"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-431> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-403> a edu:Question ;
    dcterms:identifier "SE-403" ;
    rdfs:label "dsec-privacy C2: marketing reuses the scoring results"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-408> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-404> a edu:Question ;
    dcterms:identifier "SE-404" ;
    rdfs:label "dsec-privacy C2: the reuse put to a compatibility assessment or its own basis"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-432> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-405> a edu:Question ;
    dcterms:identifier "SE-405" ;
    rdfs:label "dsec-privacy C3: automated scoring has no DPIA"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-406> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-406> a edu:Question ;
    dcterms:identifier "SE-406" ;
    rdfs:label "dsec-privacy C3: no Art. 22 safeguards on the automated decline"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-409> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-407> a edu:Question ;
    dcterms:identifier "SE-407" ;
    rdfs:label "dsec-privacy C3: a DPIA with safeguards proposed"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-433> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-408> a edu:Question ;
    dcterms:identifier "SE-408" ;
    rdfs:label "dsec-privacy I1: marital history and social media profile collected"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-403> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-409> a edu:Question ;
    dcterms:identifier "SE-409" ;
    rdfs:label "dsec-privacy I1: marketing data kept ten years"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-404> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-410> a edu:Question ;
    dcterms:identifier "SE-410" ;
    rdfs:label "dsec-privacy I1: collections transfer with no safeguard"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-405> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-411> a edu:Question ;
    dcterms:identifier "SE-411" ;
    rdfs:label "dsec-privacy I1: collections processor with no contract"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-407> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-412> a edu:Question ;
    dcterms:identifier "SE-412" ;
    rdfs:label "dsec-privacy Q1: conclusions proposed for the DPO and counsel to sign off"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/G-532> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-501> a edu:Question ;
    dcterms:identifier "SE-501" ;
    rdfs:label "dsec-monitoring-audit C1: DBAs can truncate the audit table that records them"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-505> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-502> a edu:Question ;
    dcterms:identifier "SE-502" ;
    rdfs:label "dsec-monitoring-audit C1: log integrity separated from the people logged"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-531> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-503> a edu:Question ;
    dcterms:identifier "SE-503" ;
    rdfs:label "dsec-monitoring-audit C2: fourteen unconfirmed accounts left active"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-510> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-504> a edu:Question ;
    dcterms:identifier "SE-504" ;
    rdfs:label "dsec-monitoring-audit C2: unconfirmed access revoked"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-532> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-505> a edu:Question ;
    dcterms:identifier "SE-505" ;
    rdfs:label "dsec-monitoring-audit C3: the team lead recertifies their own access"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-502> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-506> a edu:Question ;
    dcterms:identifier "SE-506" ;
    rdfs:label "dsec-monitoring-audit C3: an independent reviewer assigned"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-533> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-507> a edu:Question ;
    dcterms:identifier "SE-507" ;
    rdfs:label "dsec-monitoring-audit I1: break-glass sessions not logged"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-501> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-508> a edu:Question ;
    dcterms:identifier "SE-508" ;
    rdfs:label "dsec-monitoring-audit I1: service account reads of PANs not logged"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-509> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-509> a edu:Question ;
    dcterms:identifier "SE-509" ;
    rdfs:label "dsec-monitoring-audit I1: audit logs kept 90 days"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-504> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-510> a edu:Question ;
    dcterms:identifier "SE-510" ;
    rdfs:label "dsec-monitoring-audit I1: an alert with no responder"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-506> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-511> a edu:Question ;
    dcterms:identifier "SE-511" ;
    rdfs:label "dsec-monitoring-audit Q1: retention cited to PCI DSS Req. 10.5.1, no invented figures"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-553> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-1801> a edu:Question ;
    dcterms:identifier "SE-1801" ;
    rdfs:label "Special categories of personal data"@en ;
    schema:text "Which is a special category of personal data? (a) name; (b) health data; (c) e-mail address; (d) year of birth"@en ;
    schema:learningResourceType "multiple_choice" ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/K12-70093> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-1802> a edu:Question ;
    dcterms:identifier "SE-1802" ;
    rdfs:label "Database structure"@en ;
    schema:text "What is the primary key of a table for? (a) it identifies each row uniquely; (b) it sets the colour of a column; (c) it deletes the table; (d) it counts the columns"@en ;
    schema:learningResourceType "multiple_choice" ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/K12-69062> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-1803> a edu:Question ;
    dcterms:identifier "SE-1803" ;
    rdfs:label "Legal basis for processing"@en ;
    schema:text "A shop delivers an ordered product to a customer and processes the customer's address to do so. Which legal basis is this? (a) consent; (b) contract; (c) legitimate interest; (d) performance of a public task"@en ;
    schema:learningResourceType "multiple_choice" ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/K12-70095> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-1901> a edu:Question ;
    dcterms:identifier "SE-1901" ;
    rdfs:label "Binding force of a data security requirement's source"@en ;
    schema:text "A requirements register lists GDPR Art. 32, DORA, the EBA Guidelines on ICT and security risk management and PCI DSS. Which one binds the bank only through its contracts with the card schemes? (a) PCI DSS; (b) GDPR; (c) DORA; (d) the EBA Guidelines"@en ;
    schema:learningResourceType "multiple_choice" ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/G-1901> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-1804> a edu:Question ;
    dcterms:identifier "SE-1804" ;
    rdfs:label "Kinds of legal texts"@en ;
    schema:text "Where is the text of an Estonian act in force found? (a) in Riigi Teataja; (b) in newspaper notices; (c) in the tables of Statistics Estonia; (d) on a games portal"@en ;
    schema:learningResourceType "multiple_choice" ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/K12-57100> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-350> a edu:Question ;
    dcterms:identifier "SE-350" ;
    rdfs:label "dsec-access-design C1: the PAN masked in the mart and portal but in clear in the agency file"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-310> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-351> a edu:Question ;
    dcterms:identifier "SE-351" ;
    rdfs:label "dsec-access-design C1: an unkeyed hash of the personal code is recoverable and replaced by a keyed method"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-353> , <https://knobit.org/id/knobit/S-905> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-352> a edu:Question ;
    dcterms:identifier "SE-352" ;
    rdfs:label "dsec-access-design C2: the team lead holds propose and approve through two clean roles"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-303> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-353> a edu:Question ;
    dcterms:identifier "SE-353" ;
    rdfs:label "dsec-access-design C2: the cross-role conflict removed by design, absence cover kept"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-331> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-354> a edu:Question ;
    dcterms:identifier "SE-354" ;
    rdfs:label "dsec-access-design I1: hardship notes restricted with no access design"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/K-821> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-355> a edu:Question ;
    dcterms:identifier "SE-355" ;
    rdfs:label "dsec-access-design I1: the confidentiality standard has no special-category class"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-910> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-356> a edu:Question ;
    dcterms:identifier "SE-356" ;
    rdfs:label "dsec-access-design I2: the agency row filter keyed on a value the agency loads"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-355> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-357> a edu:Question ;
    dcterms:identifier "SE-357" ;
    rdfs:label "dsec-access-design I2: a shared agency login with the go-live password"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-908> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-358> a edu:Question ;
    dcterms:identifier "SE-358" ;
    rdfs:label "dsec-access-design I2: an internal portal server open to the internet"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-906> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-359> a edu:Question ;
    dcterms:identifier "SE-359" ;
    rdfs:label "dsec-access-design I2: the agency file and its password in the same e-mail"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-905> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-360> a edu:Question ;
    dcterms:identifier "SE-360" ;
    rdfs:label "dsec-access-design I2: an outsourcing contract with no security terms"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-913> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-361> a edu:Question ;
    dcterms:identifier "SE-361" ;
    rdfs:label "dsec-access-design I3: collectors can change amounts loaded from core banking"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-904> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-362> a edu:Question ;
    dcterms:identifier "SE-362" ;
    rdfs:label "dsec-access-design I3: a CRUD matrix of jobs against the collections tables"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-912> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-363> a edu:Question ;
    dcterms:identifier "SE-363" ;
    rdfs:label "dsec-access-design I3: break-glass granted on an unverified phone call"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-354> , <https://knobit.org/id/knobit/S-909> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-364> a edu:Question ;
    dcterms:identifier "SE-364" ;
    rdfs:label "dsec-access-design I4: vulnerability, threat and risk told apart per finding"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-902> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-365> a edu:Question ;
    dcterms:identifier "SE-365" ;
    rdfs:label "dsec-access-design I4: requirement sources classified by kind and place of publication"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/G-1901> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-366> a edu:Question ;
    dcterms:identifier "SE-366" ;
    rdfs:label "dsec-access-design I4: open questions sent to the role that decides them"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-903> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-367> a edu:Question ;
    dcterms:identifier "SE-367" ;
    rdfs:label "dsec-access-design Q1: agency controls tagged by type of data security"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-907> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-368> a edu:Question ;
    dcterms:identifier "SE-368" ;
    rdfs:label "dsec-access-design Q1: a tool named for each agency control"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-911> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-369> a edu:Question ;
    dcterms:identifier "SE-369" ;
    rdfs:label "dsec-access-design Q1: implementation, performance and risk metrics"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-914> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-370> a edu:Question ;
    dcterms:identifier "SE-370" ;
    rdfs:label "dsec-access-design Q2: why the bank secures the data - risk and business"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-901> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-371> a edu:Question ;
    dcterms:identifier "SE-371" ;
    rdfs:label "dsec-access-design Q2: least privilege with every duty still covered"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-333> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-450> a edu:Question ;
    dcterms:identifier "SE-450" ;
    rdfs:label "dsec-processing-records-dpia C1: catch-all purpose improve customer experience reported"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-402> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-451> a edu:Question ;
    dcterms:identifier "SE-451" ;
    rdfs:label "dsec-processing-records-dpia C1: catch-all purpose split or suspended, payment data not carried over"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/O-1904> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-452> a edu:Question ;
    dcterms:identifier "SE-452" ;
    rdfs:label "dsec-processing-records-dpia C2: fraud monitoring record missing Art. 30(1) content reported"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-410> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-453> a edu:Question ;
    dcterms:identifier "SE-453" ;
    rdfs:label "dsec-processing-records-dpia C2: missing data subjects, recipients and security measures filled or raised"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-455> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-454> a edu:Question ;
    dcterms:identifier "SE-454" ;
    rdfs:label "dsec-processing-records-dpia C3: AML due diligence re-based from consent to legal obligation"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-401> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-455> a edu:Question ;
    dcterms:identifier "SE-455" ;
    rdfs:label "dsec-processing-records-dpia C3: payment execution re-based from legitimate interest to contract"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-401> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-456> a edu:Question ;
    dcterms:identifier "SE-456" ;
    rdfs:label "dsec-processing-records-dpia C3: newsletter consent and biometric explicit consent left alone"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-451> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-457> a edu:Question ;
    dcterms:identifier "SE-457" ;
    rdfs:label "dsec-processing-records-dpia C4: biometric onboarding screened as DPIA required"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-406> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-458> a edu:Question ;
    dcterms:identifier "SE-458" ;
    rdfs:label "dsec-processing-records-dpia C4: automatic rejection given Art. 22(3) safeguards"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-409> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-459> a edu:Question ;
    dcterms:identifier "SE-459" ;
    rdfs:label "dsec-processing-records-dpia C4: newsletter screened as no DPIA, existing DPIA kept"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-453> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-460> a edu:Question ;
    dcterms:identifier "SE-460" ;
    rdfs:label "dsec-processing-records-dpia I1: biometric vendor with no Art. 28 contract"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-407> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-461> a edu:Question ;
    dcterms:identifier "SE-461" ;
    rdfs:label "dsec-processing-records-dpia I1: vendor support access from India with no safeguard"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-405> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-462> a edu:Question ;
    dcterms:identifier "SE-462" ;
    rdfs:label "dsec-processing-records-dpia I1: Art. 46 safeguard with transfer impact assessment, or transfer suspended"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-454> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-463> a edu:Question ;
    dcterms:identifier "SE-463" ;
    rdfs:label "dsec-processing-records-dpia I1: Swiss transfer on adequacy left alone"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-454> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-464> a edu:Question ;
    dcterms:identifier "SE-464" ;
    rdfs:label "dsec-processing-records-dpia I2: indefinite AML retention replaced by the legal period"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-404> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-465> a edu:Question ;
    dcterms:identifier "SE-465" ;
    rdfs:label "dsec-processing-records-dpia Q1: conclusions proposed for DPO and legal counsel sign-off"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/G-532> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-550> a edu:Question ;
    dcterms:identifier "SE-550" ;
    rdfs:label "dsec-log-integrity-recertification C1: the restricted-read log with no reviewer and no review on record"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-503> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-551> a edu:Question ;
    dcterms:identifier "SE-551" ;
    rdfs:label "dsec-log-integrity-recertification C1: a log with a reviewer but no frequency, reviewed once ad hoc"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-503> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-552> a edu:Question ;
    dcterms:identifier "SE-552" ;
    rdfs:label "dsec-log-integrity-recertification C1: unreviewed logs given a named reviewer and a stated frequency"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-503> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-553> a edu:Question ;
    dcterms:identifier "SE-553" ;
    rdfs:label "dsec-log-integrity-recertification C2: quarterly DBA recertification last run two quarters ago"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-507> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-554> a edu:Question ;
    dcterms:identifier "SE-554" ;
    rdfs:label "dsec-log-integrity-recertification C2: annual recertification of unmasked readers overdue"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-507> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-555> a edu:Question ;
    dcterms:identifier "SE-555" ;
    rdfs:label "dsec-log-integrity-recertification C2: overdue campaigns scheduled to run now, not at the next slot"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-507> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-556> a edu:Question ;
    dcterms:identifier "SE-556" ;
    rdfs:label "dsec-log-integrity-recertification C3: break-glass role in no recertification campaign"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-508> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-557> a edu:Question ;
    dcterms:identifier "SE-557" ;
    rdfs:label "dsec-log-integrity-recertification C3: service account reading restricted data in no campaign"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-508> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-558> a edu:Question ;
    dcterms:identifier "SE-558" ;
    rdfs:label "dsec-log-integrity-recertification C3: uncovered roles put into a campaign with an independent reviewer"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-508> , <https://knobit.org/id/knobit/S-533> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-559> a edu:Question ;
    dcterms:identifier "SE-559" ;
    rdfs:label "dsec-log-integrity-recertification I1: semi-annual campaign not yet due left alone"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-507> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-560> a edu:Question ;
    dcterms:identifier "SE-560" ;
    rdfs:label "dsec-log-integrity-recertification I1: retired role with no holders not flagged as outside recertification"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-508> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-561> a edu:Question ;
    dcterms:identifier "SE-561" ;
    rdfs:label "dsec-log-integrity-recertification I1: log with weekly reviews on record left alone"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-503> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-562> a edu:Question ;
    dcterms:identifier "SE-562" ;
    rdfs:label "dsec-log-integrity-recertification I2: a log entry records who, what, when, from where and the result"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-551> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-563> a edu:Question ;
    dcterms:identifier "SE-563" ;
    rdfs:label "dsec-log-integrity-recertification I2: logs protected from the people they record"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-551> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-564> a edu:Question ;
    dcterms:identifier "SE-564" ;
    rdfs:label "dsec-log-integrity-recertification I2: every log reviewed by a named reviewer at a stated frequency"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-551> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-565> a edu:Question ;
    dcterms:identifier "SE-565" ;
    rdfs:label "dsec-log-integrity-recertification I2: monitoring rules with a threshold and a responder"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-551> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-566> a edu:Question ;
    dcterms:identifier "SE-566" ;
    rdfs:label "dsec-log-integrity-recertification I3: recertification is periodic, on a stated frequency, run on time"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-552> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-567> a edu:Question ;
    dcterms:identifier "SE-567" ;
    rdfs:label "dsec-log-integrity-recertification I3: recertified by someone who does not hold the access"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-552> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-568> a edu:Question ;
    dcterms:identifier "SE-568" ;
    rdfs:label "dsec-log-integrity-recertification I3: unconfirmed or rejected access revoked with evidence"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-552> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-569> a edu:Question ;
    dcterms:identifier "SE-569" ;
    rdfs:label "dsec-log-integrity-recertification I3: every privileged and restricted-data role in scope, service and emergency accounts included"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-552> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-150> a edu:Question ;
    dcterms:identifier "SE-150" ;
    rdfs:label "dsec-requirements-classification C1: security codes read out on calls are stored in recordings and transcripts"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-205> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-151> a edu:Question ;
    dcterms:identifier "SE-151" ;
    rdfs:label "dsec-requirements-classification C1: card numbers spoken on calls bring the contact-centre platform into PCI DSS scope"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-131> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-152> a edu:Question ;
    dcterms:identifier "SE-152" ;
    rdfs:label "dsec-requirements-classification C1: a PCI DSS requirement cites the retired v3.2.1"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-104> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-250> a edu:Question ;
    dcterms:identifier "SE-250" ;
    rdfs:label "dsec-requirements-classification C2: tokenised transcripts with the key kept are pseudonymised, not anonymous"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-207> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-251> a edu:Question ;
    dcterms:identifier "SE-251" ;
    rdfs:label "dsec-requirements-classification C2: per-agent daily statistics single out each agent"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-203> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-252> a edu:Question ;
    dcterms:identifier "SE-252" ;
    rdfs:label "dsec-requirements-classification C3: a voiceprint is biometric special category data"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-208> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-253> a edu:Question ;
    dcterms:identifier "SE-253" ;
    rdfs:label "dsec-requirements-classification C3: call transcripts reveal health data"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-208> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-254> a edu:Question ;
    dcterms:identifier "SE-254" ;
    rdfs:label "dsec-requirements-classification I1: an LLM summary of a transcript inherits its classification"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-202> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-255> a edu:Question ;
    dcterms:identifier "SE-255" ;
    rdfs:label "dsec-requirements-classification I1: a per-call sentiment score is not public"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-202> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-153> a edu:Question ;
    dcterms:identifier "SE-153" ;
    rdfs:label "dsec-requirements-classification I2: DORA excluded because the platform is a vendor SaaS"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-107> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-154> a edu:Question ;
    dcterms:identifier "SE-154" ;
    rdfs:label "dsec-requirements-classification I2: banking secrecy excluded although calls discuss customers' accounts"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-107> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-155> a edu:Question ;
    dcterms:identifier "SE-155" ;
    rdfs:label "dsec-requirements-classification I3: the erasure request decided per record type against AML retention"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-155> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-156> a edu:Question ;
    dcterms:identifier "SE-156" ;
    rdfs:label "dsec-requirements-classification I3: the erase-everything control corrected and the precedence put to the DPO"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-132> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-157> a edu:Question ;
    dcterms:identifier "SE-157" ;
    rdfs:label "dsec-requirements-classification I4: every requirement records provision, scope, control, owner and evidence"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-151> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#SE-256> a edu:Question ;
    dcterms:identifier "SE-256" ;
    rdfs:label "dsec-requirements-classification I4: every column at a level of the scheme, none unclassified"@en ;
    edu:solvableWith [ a edu:KnobitSet ; edu:memberKnobit <https://knobit.org/id/knobit/S-204> ] ;
    schema:isPartOf <https://knobit.org/id/register/data-security> .

<https://knobit.org/id/register/data-security#REF-1> a schema:CreativeWork ;
    dcterms:identifier "REF-1" ;
    dcterms:title "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security"@en ;
    dcterms:publisher "DAMA International" ;
    schema:version "2nd edition, revised (DMBOK2/RE)" ;
    skos:note "target level: CDMP Associate: the data security questions of the Data Management Fundamentals exam (DAMA International); CDMP has no data security specialist exam"@en .

<https://knobit.org/id/register/data-security#SV-1> a edu:LearningOutcome ;
    dcterms:identifier "SV-1" ;
    rdfs:label "Identify data security requirements"@en ;
    dcterms:description "Business and regulatory requirements for protecting data."@en ;
    skos:notation "2.1" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.1"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-131> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-132> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-151> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-152> ;
    edu:includesKnobit <https://knobit.org/id/knobit/G-1901> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-3> a edu:LearningOutcome ;
    dcterms:identifier "SV-3" ;
    rdfs:label "Define data security standards: confidentiality levels and regulatory categories"@en ;
    dcterms:description "Classification of data by confidentiality and by the regulations that apply."@en ;
    skos:notation "2.3" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.3"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-231> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-251> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-252> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-4> a edu:LearningOutcome ;
    dcterms:identifier "SV-4" ;
    rdfs:label "Obfuscation or masking; de-identification"@en ;
    dcterms:description "Making data unreadable or non-identifying."@en ;
    skos:notation "1.3.9" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.9"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-253> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-5> a edu:LearningOutcome ;
    dcterms:identifier "SV-5" ;
    rdfs:label "Data security processes: access, authentication, authorisation, entitlement"@en ;
    dcterms:description "The four A's and entitlement management."@en ;
    skos:notation "1.3.6" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.6"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-331> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-333> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-351> ;
    edu:includesKnobit <https://knobit.org/id/knobit/G-255> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-355> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-6> a edu:LearningOutcome ;
    dcterms:identifier "SV-6" ;
    rdfs:label "Implement controls: manage users, roles and permissions; control access to restricted data"@en ;
    dcterms:description "Role-based access, views, masking and privileged access."@en ;
    skos:notation "2.5" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.5"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-332> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-353> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-354> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-7> a edu:LearningOutcome ;
    dcterms:identifier "SV-7" ;
    rdfs:label "Regulated data: personal data and privacy obligations"@en ;
    dcterms:description "Personal data under GDPR and the obligations it carries."@en ;
    skos:notation "1.3.12" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.12"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-431> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-432> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-433> ;
    edu:includesKnobit <https://knobit.org/id/knobit/G-532> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-451> ;
    edu:includesKnobit <https://knobit.org/id/knobit/O-1904> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-453> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-454> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-455> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-8> a edu:LearningOutcome ;
    dcterms:identifier "SV-8" ;
    rdfs:label "Monitor user authentication and access behaviour; manage security policy compliance (auditing)"@en ;
    dcterms:description "Logging, monitoring, access reviews and audits."@en ;
    skos:notation "2.5" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.5"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-531> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-532> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-533> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-551> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-552> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-553> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-9> a edu:LearningOutcome ;
    dcterms:identifier "SV-9" ;
    rdfs:label "Business drivers, goals and principles"@en ;
    dcterms:description "Why data security matters to the bank."@en ;
    skos:notation "1.1-1.2" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.1-1.2"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-901> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-10> a edu:LearningOutcome ;
    dcterms:identifier "SV-10" ;
    rdfs:label "Vulnerability, threat, risk, risk classifications; assess current risks"@en ;
    dcterms:description "Security risk."@en ;
    skos:notation "1.3.1-1.3.4, 2.4" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.1-1.3.4, 2.4"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-902> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-11> a edu:LearningOutcome ;
    dcterms:identifier "SV-11" ;
    rdfs:label "Data security organisation"@en ;
    dcterms:description "Who does data security."@en ;
    skos:notation "1.3.5" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.5"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-903> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-12> a edu:LearningOutcome ;
    dcterms:identifier "SV-12" ;
    rdfs:label "Data integrity"@en ;
    dcterms:description "Integrity as a security goal."@en ;
    skos:notation "1.3.7" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.7"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-904> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-13> a edu:LearningOutcome ;
    dcterms:identifier "SV-13" ;
    rdfs:label "Encryption"@en ;
    dcterms:description "Hash, symmetric and public-key encryption."@en ;
    skos:notation "1.3.8" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.8"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-905> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-14> a edu:LearningOutcome ;
    dcterms:identifier "SV-14" ;
    rdfs:label "Network security terms"@en ;
    dcterms:description "Network and device security vocabulary."@en ;
    skos:notation "1.3.10" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.10"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-906> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-15> a edu:LearningOutcome ;
    dcterms:identifier "SV-15" ;
    rdfs:label "Types of data security"@en ;
    dcterms:description "Facility, device, credential, document security."@en ;
    skos:notation "1.3.11" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.11"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-907> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-16> a edu:LearningOutcome ;
    dcterms:identifier "SV-16" ;
    rdfs:label "System security risks"@en ;
    dcterms:description "Privilege abuse, injection, default passwords, backup abuse."@en ;
    skos:notation "1.3.13" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.13"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-908> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-17> a edu:LearningOutcome ;
    dcterms:identifier "SV-17" ;
    rdfs:label "Hacking, social threats, malware"@en ;
    dcterms:description "Attack types."@en ;
    skos:notation "1.3.14-1.3.16" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.14-1.3.16"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-909> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-18> a edu:LearningOutcome ;
    dcterms:identifier "SV-18" ;
    rdfs:label "Define data security policy and standards"@en ;
    dcterms:description "Policy and the standards it rests on."@en ;
    skos:notation "2.2-2.3" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.2-2.3"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-910> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-19> a edu:LearningOutcome ;
    dcterms:identifier "SV-19" ;
    rdfs:label "Tools"@en ;
    dcterms:description "Security tools."@en ;
    skos:notation "3" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 3"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-911> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-20> a edu:LearningOutcome ;
    dcterms:identifier "SV-20" ;
    rdfs:label "Techniques"@en ;
    dcterms:description "Security techniques."@en ;
    skos:notation "4" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 4"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-912> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-21> a edu:LearningOutcome ;
    dcterms:identifier "SV-21" ;
    rdfs:label "Implementation guidelines"@en ;
    dcterms:description "Readiness, culture, outsourcing, cloud."@en ;
    skos:notation "5" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 5"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-913> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-22> a edu:LearningOutcome ;
    dcterms:identifier "SV-22" ;
    rdfs:label "Data security governance: metrics"@en ;
    dcterms:description "Measuring data security."@en ;
    skos:notation "6" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 6"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-914> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-2> a edu:LearningOutcome ;
    dcterms:identifier "SV-2" ;
    rdfs:label "Types of data security restrictions"@en ;
    dcterms:description "Confidential and regulated data: personal data, financial data, PCI DSS cardholder data."@en ;
    skos:notation "1.3.12" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.12"@en ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-153> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-154> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-155> ;
    edu:includesKnobit <https://knobit.org/id/knobit/S-254> ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .