knobit.org

Data security

edu:Competence

https://knobit.org/id/competence/data-security

Also as Turtle · JSON-LD · RDF/XML

consists ofRegister regulatory security requirements
consists ofClassify data
consists ofDesign access control
consists ofRecord processing activities and assess privacy impact
consists ofMonitor and audit access
dcterms:licensehttps://creativecommons.org/licenses/by/4.0/
rdfs:commentData security and privacy end to end — the regulatory requirements register (GDPR, PCI DSS v4.0.1, DORA) mapped to controls, data classification applied to physical columns, access control design (roles, entitlements, least privilege, segregation of duties, row and column security, masking), records of processing and DPIAs, and access monitoring and recertification — each deliverable a YAML file gated by an anomaly review checklist. Use it whenever the user mentions data classification or sensitive data, PII, cardholder data or PCI DSS scope, access control, roles and entitlements, least privilege, segregation of duties or toxic combinations, row-level or column-level security, data masking or tokenisation, GDPR records of processing (Art. 30), lawful basis, DPIA, data minimisation, access logs or audit trails, or access recertification — or hands over a role matrix, a classification sheet or a privacy register for review, even if they never say "data security". en
rdfs:labelAndmeturve et
rdfs:labelData security en
related topicData security (DAMA-DMBOK2 chapter 7)

Used by

related learning outcomedata-security skill (SKILL.md)
related learning outcomeData security file schemas
related learning outcomeTests of the data-security skill
requires competenceData security specialist