Data security and privacy (DAMA-DMBOK2)
https://knobit.org/id/register/data-security
Also as Turtle · JSON-LD · RDF/XML
| LCG purposes | Assessing the learner's knowledge or skill state |
|---|---|
| LCG purposes | Opening up a learning outcome |
| LCG purposes | Selecting an assessment task or learning activity |
| conforms to profile | https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1 |
| dcterms:description | Recognising and repairing defects in data security and privacy deliverables - requirements, classification, access control, privacy records and monitoring - and following sensitive data to everywhere it has been copied: the competence the data-security skill applies, and that skill-tests assesses. en |
| dcterms:identifier | SCOPE-1 |
| dcterms:license | https://creativecommons.org/licenses/by/4.0/ |
| dcterms:rights | Copyright 2026 Peep Küngas. Licensed under CC BY 4.0. |
| dcterms:title | Data security and privacy (DAMA-DMBOK2) en |
| owl:sameAs | https://bitbucket.org/reffa/ontology/skills/data-security |
| schema:license | https://creativecommons.org/licenses/by/4.0/ |
| skos:note | audience: Data security and privacy officers, data owners, and AI models assessed by skill-tests en |
| skos:note | domain: Data management, data security (DAMA-DMBOK2 chapter 7) en |
| skos:note | level: CDMP Associate: the data security questions of the Data Management Fundamentals exam (DAMA International); CDMP has no data security specialist exam en |
Items and references
DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security schema:CreativeWork
https://knobit.org/id/register/data-security#REF-1
| dcterms:identifier | REF-1 |
|---|---|
| dcterms:publisher | DAMA International |
| dcterms:title | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security en |
| schema:version | 2nd edition, revised (DMBOK2/RE) |
| skos:note | target level: CDMP Associate: the data security questions of the Data Management Fundamentals exam (DAMA International); CDMP has no data security specialist exam en |
dsec-regulatory-requirements C1: PCI DSS cited for IBAN encryption edu:Question
https://knobit.org/id/register/data-security#SE-101
| dcterms:identifier | SE-101 |
|---|---|
| rdfs:label | dsec-regulatory-requirements C1: PCI DSS cited for IBAN encryption en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (3 points) |
| solvable with | set of Recognises a regulation cited for data it does not cover |
dsec-regulatory-requirements C1: the PAN copy in the warehouse is outside RQ-004's scope edu:Question
https://knobit.org/id/register/data-security#SE-102
| dcterms:identifier | SE-102 |
|---|---|
| rdfs:label | dsec-regulatory-requirements C1: the PAN copy in the warehouse is outside RQ-004's scope en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (3 points) |
| solvable with | set of Recognises regulated data outside its requirement's scope |
dsec-regulatory-requirements C1: what the copy brings into PCI DSS scope edu:Question
https://knobit.org/id/register/data-security#SE-103
| dcterms:identifier | SE-103 |
|---|---|
| rdfs:label | dsec-regulatory-requirements C1: what the copy brings into PCI DSS scope en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (3 points) |
| solvable with | set of Traces the scope consequence of a regulated data copy |
dsec-regulatory-requirements C2: erasure against AML retention edu:Question
https://knobit.org/id/register/data-security#SE-104
| dcterms:identifier | SE-104 |
|---|---|
| rdfs:label | dsec-regulatory-requirements C2: erasure against AML retention en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Recognises conflicting requirements with no precedence |
dsec-regulatory-requirements C2: the conflict raised with the DPO under Art. 17(3)(b) edu:Question
https://knobit.org/id/register/data-security#SE-105
| dcterms:identifier | SE-105 |
|---|---|
| rdfs:label | dsec-regulatory-requirements C2: the conflict raised with the DPO under Art. 17(3)(b) en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Raises a requirement conflict for the owner of the interpretation |
dsec-regulatory-requirements I1: RQ-002 has no control edu:Question
https://knobit.org/id/register/data-security#SE-106
| dcterms:identifier | SE-106 |
|---|---|
| rdfs:label | dsec-regulatory-requirements I1: RQ-002 has no control en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (3 points) |
| solvable with | set of Recognises a requirement with no control |
dsec-regulatory-requirements I1: RQ-006 has no data scope edu:Question
https://knobit.org/id/register/data-security#SE-107
| dcterms:identifier | SE-107 |
|---|---|
| rdfs:label | dsec-regulatory-requirements I1: RQ-006 has no data scope en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (3 points) |
| solvable with | set of Recognises a requirement with no data scope |
dsec-regulatory-requirements I1: RQ-005 cites a requirement PCI DSS does not have edu:Question
https://knobit.org/id/register/data-security#SE-108
| dcterms:identifier | SE-108 |
|---|---|
| rdfs:label | dsec-regulatory-requirements I1: RQ-005 cites a requirement PCI DSS does not have en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (3 points) |
| solvable with | set of Recognises a requirement cited to the wrong article or version |
dsec-regulatory-requirements I1: CT-006 has no owner edu:Question
https://knobit.org/id/register/data-security#SE-109
| dcterms:identifier | SE-109 |
|---|---|
| rdfs:label | dsec-regulatory-requirements I1: CT-006 has no owner en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (3 points) |
| solvable with | set of Recognises a requirement or control with no owner |
dsec-regulatory-requirements I1: CT-007 has no evidence edu:Question
https://knobit.org/id/register/data-security#SE-110
| dcterms:identifier | SE-110 |
|---|---|
| rdfs:label | dsec-regulatory-requirements I1: CT-007 has no evidence en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (3 points) |
| solvable with | set of Recognises a control with no evidence |
dsec-regulatory-requirements I1: DORA produced no requirements edu:Question
https://knobit.org/id/register/data-security#SE-111
| dcterms:identifier | SE-111 |
|---|---|
| rdfs:label | dsec-regulatory-requirements I1: DORA produced no requirements en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (3 points) |
| solvable with | set of Recognises a regulation in force with no requirements |
dsec-regulatory-requirements I2: the nightly CVV purge cannot meet Req. 3.3.1 edu:Question
https://knobit.org/id/register/data-security#SE-112
| dcterms:identifier | SE-112 |
|---|---|
| rdfs:label | dsec-regulatory-requirements I2: the nightly CVV purge cannot meet Req. 3.3.1 en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (1 points) |
| solvable with | set of Recognises a control unable to satisfy its requirement |
dsec-requirements-classification C1: security codes read out on calls are stored in recordings and transcripts edu:Question
https://knobit.org/id/register/data-security#SE-150
| dcterms:identifier | SE-150 |
|---|---|
| rdfs:label | dsec-requirements-classification C1: security codes read out on calls are stored in recordings and transcripts en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (3 points) |
| solvable with | set of Recognises stored sensitive authentication data |
dsec-requirements-classification C1: card numbers spoken on calls bring the contact-centre platform into PCI DSS scope edu:Question
https://knobit.org/id/register/data-security#SE-151
| dcterms:identifier | SE-151 |
|---|---|
| rdfs:label | dsec-requirements-classification C1: card numbers spoken on calls bring the contact-centre platform into PCI DSS scope en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (3 points) |
| solvable with | set of Traces the scope consequence of a regulated data copy |
dsec-requirements-classification C1: a PCI DSS requirement cites the retired v3.2.1 edu:Question
https://knobit.org/id/register/data-security#SE-152
| dcterms:identifier | SE-152 |
|---|---|
| rdfs:label | dsec-requirements-classification C1: a PCI DSS requirement cites the retired v3.2.1 en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (3 points) |
| solvable with | set of Recognises a requirement cited to the wrong article or version |
dsec-requirements-classification I2: DORA excluded because the platform is a vendor SaaS edu:Question
https://knobit.org/id/register/data-security#SE-153
| dcterms:identifier | SE-153 |
|---|---|
| rdfs:label | dsec-requirements-classification I2: DORA excluded because the platform is a vendor SaaS en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (1 points) |
| solvable with | set of Recognises a regulation in force with no requirements |
dsec-requirements-classification I2: banking secrecy excluded although calls discuss customers' accounts edu:Question
https://knobit.org/id/register/data-security#SE-154
| dcterms:identifier | SE-154 |
|---|---|
| rdfs:label | dsec-requirements-classification I2: banking secrecy excluded although calls discuss customers' accounts en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (1 points) |
| solvable with | set of Recognises a regulation in force with no requirements |
dsec-requirements-classification I3: the erasure request decided per record type against AML retention edu:Question
https://knobit.org/id/register/data-security#SE-155
| dcterms:identifier | SE-155 |
|---|---|
| rdfs:label | dsec-requirements-classification I3: the erasure request decided per record type against AML retention en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I3 (2 points) |
| solvable with | set of Explains the limits of erasure against legal retention |
dsec-requirements-classification I3: the erase-everything control corrected and the precedence put to the DPO edu:Question
https://knobit.org/id/register/data-security#SE-156
| dcterms:identifier | SE-156 |
|---|---|
| rdfs:label | dsec-requirements-classification I3: the erase-everything control corrected and the precedence put to the DPO en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I3 (2 points) |
| solvable with | set of Raises a requirement conflict for the owner of the interpretation |
dsec-requirements-classification I4: every requirement records provision, scope, control, owner and evidence edu:Question
https://knobit.org/id/register/data-security#SE-157
| dcterms:identifier | SE-157 |
|---|---|
| rdfs:label | dsec-requirements-classification I4: every requirement records provision, scope, control, owner and evidence en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I4 (1 points) |
| solvable with | set of Explains the regulatory requirements register |
Special categories of personal data edu:Question
https://knobit.org/id/register/data-security#SE-1801
| dcterms:identifier | SE-1801 |
|---|---|
| rdfs:label | Special categories of personal data en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:learningResourceType | multiple_choice |
| schema:text | Which is a special category of personal data? (a) name; (b) health data; (c) e-mail address; (d) year of birth en |
| solvable with | set of Distinguishes personal data from special categories of personal data |
Database structure edu:Question
https://knobit.org/id/register/data-security#SE-1802
| dcterms:identifier | SE-1802 |
|---|---|
| rdfs:label | Database structure en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:learningResourceType | multiple_choice |
| schema:text | What is the primary key of a table for? (a) it identifies each row uniquely; (b) it sets the colour of a column; (c) it deletes the table; (d) it counts the columns en |
| solvable with | set of Explains how database tables and relationships are structured |
Legal basis for processing edu:Question
https://knobit.org/id/register/data-security#SE-1803
| dcterms:identifier | SE-1803 |
|---|---|
| rdfs:label | Legal basis for processing en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:learningResourceType | multiple_choice |
| schema:text | A shop delivers an ordered product to a customer and processes the customer's address to do so. Which legal basis is this? (a) consent; (b) contract; (c) legitimate interest; (d) performance of a public task en |
| solvable with | set of Explains the legal bases for processing personal data |
Kinds of legal texts edu:Question
https://knobit.org/id/register/data-security#SE-1804
| dcterms:identifier | SE-1804 |
|---|---|
| rdfs:label | Kinds of legal texts en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:learningResourceType | multiple_choice |
| schema:text | Where is the text of an Estonian act in force found? (a) in Riigi Teataja; (b) in newspaper notices; (c) in the tables of Statistics Estonia; (d) on a games portal en |
| solvable with | set of Distinguishes the kinds of legal texts and where to find them |
Binding force of a data security requirement's source edu:Question
https://knobit.org/id/register/data-security#SE-1901
| dcterms:identifier | SE-1901 |
|---|---|
| rdfs:label | Binding force of a data security requirement's source en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:learningResourceType | multiple_choice |
| schema:text | A requirements register lists GDPR Art. 32, DORA, the EBA Guidelines on ICT and security risk management and PCI DSS. Which one binds the bank only through its contracts with the card schemes? (a) PCI DSS; (b) GDPR; (c) DORA; (d) the EBA Guidelines en |
| solvable with | set of Explains the kinds of rules binding an organisation's data and where they are published |
dsec-classification C1: the full PAN in the analytics table is classified internal edu:Question
https://knobit.org/id/register/data-security#SE-201
| dcterms:identifier | SE-201 |
|---|---|
| rdfs:label | dsec-classification C1: the full PAN in the analytics table is classified internal en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Recognises a card number not classified as cardholder data |
dsec-classification C1: the analytics table and its consumers enter PCI DSS scope, its derived columns inherit edu:Question
https://knobit.org/id/register/data-security#SE-202
| dcterms:identifier | SE-202 |
|---|---|
| rdfs:label | dsec-classification C1: the analytics table and its consumers enter PCI DSS scope, its derived columns inherit en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Traces the scope consequence of a regulated data copy, Propagates classification to derived columns |
dsec-classification C2: the hashed personal code is pseudonymous, not anonymous edu:Question
https://knobit.org/id/register/data-security#SE-203
| dcterms:identifier | SE-203 |
|---|---|
| rdfs:label | dsec-classification C2: the hashed personal code is pseudonymous, not anonymous en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Recognises pseudonymised data treated as anonymous |
dsec-classification C2: the merchant-by-day aggregate has cells of one customer edu:Question
https://knobit.org/id/register/data-security#SE-204
| dcterms:identifier | SE-204 |
|---|---|
| rdfs:label | dsec-classification C2: the merchant-by-day aggregate has cells of one customer en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Recognises an aggregate still identifying a person |
dsec-classification I1: a CVV column is stored edu:Question
https://knobit.org/id/register/data-security#SE-205
| dcterms:identifier | SE-205 |
|---|---|
| rdfs:label | dsec-classification I1: a CVV column is stored en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises stored sensitive authentication data |
dsec-classification I1: the personal code is below its category's minimum edu:Question
https://knobit.org/id/register/data-security#SE-206
| dcterms:identifier | SE-206 |
|---|---|
| rdfs:label | dsec-classification I1: the personal code is below its category's minimum en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises a level below its category's minimum |
dsec-classification I1: the employer name is unclassified edu:Question
https://knobit.org/id/register/data-security#SE-207
| dcterms:identifier | SE-207 |
|---|---|
| rdfs:label | dsec-classification I1: the employer name is unclassified en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises an unclassified column |
dsec-classification I1: hardship notes hold health data edu:Question
https://knobit.org/id/register/data-security#SE-208
| dcterms:identifier | SE-208 |
|---|---|
| rdfs:label | dsec-classification I1: hardship notes hold health data en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises unrecognised special category data |
dsec-classification I2: first six and last six is not a truncation edu:Question
https://knobit.org/id/register/data-security#SE-209
| dcterms:identifier | SE-209 |
|---|---|
| rdfs:label | dsec-classification I2: first six and last six is not a truncation en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2 points) |
| solvable with | set of Recognises a derivation rule leaving data identifying |
dsec-classification I2: birth date below its source edu:Question
https://knobit.org/id/register/data-security#SE-210
| dcterms:identifier | SE-210 |
|---|---|
| rdfs:label | dsec-classification I2: birth date below its source en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2 points) |
| solvable with | set of Recognises a derived column less sensitive than its source |
dsec-classification I2: IBAN classified differently in the physical model edu:Question
https://knobit.org/id/register/data-security#SE-211
| dcterms:identifier | SE-211 |
|---|---|
| rdfs:label | dsec-classification I2: IBAN classified differently in the physical model en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2 points) |
| solvable with | set of Recognises a classification disagreeing with the physical model |
dsec-classification I2: restricted has no handling rules edu:Question
https://knobit.org/id/register/data-security#SE-212
| dcterms:identifier | SE-212 |
|---|---|
| rdfs:label | dsec-classification I2: restricted has no handling rules en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2 points) |
| solvable with | set of Recognises a classification level with no handling rules |
dsec-requirements-classification C2: tokenised transcripts with the key kept are pseudonymised, not anonymous edu:Question
https://knobit.org/id/register/data-security#SE-250
| dcterms:identifier | SE-250 |
|---|---|
| rdfs:label | dsec-requirements-classification C2: tokenised transcripts with the key kept are pseudonymised, not anonymous en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Recognises pseudonymised data treated as anonymous |
dsec-requirements-classification C2: per-agent daily statistics single out each agent edu:Question
https://knobit.org/id/register/data-security#SE-251
| dcterms:identifier | SE-251 |
|---|---|
| rdfs:label | dsec-requirements-classification C2: per-agent daily statistics single out each agent en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Recognises an aggregate still identifying a person |
dsec-requirements-classification C3: a voiceprint is biometric special category data edu:Question
https://knobit.org/id/register/data-security#SE-252
| dcterms:identifier | SE-252 |
|---|---|
| rdfs:label | dsec-requirements-classification C3: a voiceprint is biometric special category data en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (2 points) |
| solvable with | set of Recognises unrecognised special category data |
dsec-requirements-classification C3: call transcripts reveal health data edu:Question
https://knobit.org/id/register/data-security#SE-253
| dcterms:identifier | SE-253 |
|---|---|
| rdfs:label | dsec-requirements-classification C3: call transcripts reveal health data en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (2 points) |
| solvable with | set of Recognises unrecognised special category data |
dsec-requirements-classification I1: an LLM summary of a transcript inherits its classification edu:Question
https://knobit.org/id/register/data-security#SE-254
| dcterms:identifier | SE-254 |
|---|---|
| rdfs:label | dsec-requirements-classification I1: an LLM summary of a transcript inherits its classification en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises a derived column less sensitive than its source |
dsec-requirements-classification I1: a per-call sentiment score is not public edu:Question
https://knobit.org/id/register/data-security#SE-255
| dcterms:identifier | SE-255 |
|---|---|
| rdfs:label | dsec-requirements-classification I1: a per-call sentiment score is not public en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises a derived column less sensitive than its source |
dsec-requirements-classification I4: every column at a level of the scheme, none unclassified edu:Question
https://knobit.org/id/register/data-security#SE-256
| dcterms:identifier | SE-256 |
|---|---|
| rdfs:label | dsec-requirements-classification I4: every column at a level of the scheme, none unclassified en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I4 (1 points) |
| solvable with | set of Recognises an unclassified column |
dsec-access-control C1: the analyst's masked personal code is joinable to the clear customer table edu:Question
https://knobit.org/id/register/data-security#SE-301
| dcterms:identifier | SE-301 |
|---|---|
| rdfs:label | dsec-access-control C1: the analyst's masked personal code is joinable to the clear customer table en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Recognises masking a join can undo |
dsec-access-control C1: the join path closed edu:Question
https://knobit.org/id/register/data-security#SE-302
| dcterms:identifier | SE-302 |
|---|---|
| rdfs:label | dsec-access-control C1: the join path closed en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Closes the clear-text paths around a masked column |
dsec-access-control C2: the payments operator can create and approve edu:Question
https://knobit.org/id/register/data-security#SE-303
| dcterms:identifier | SE-303 |
|---|---|
| rdfs:label | dsec-access-control C2: the payments operator can create and approve en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Recognises a toxic combination in one role |
dsec-access-control C2: the conflict split into roles, not only monitored edu:Question
https://knobit.org/id/register/data-security#SE-304
| dcterms:identifier | SE-304 |
|---|---|
| rdfs:label | dsec-access-control C2: the conflict split into roles, not only monitored en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Splits a toxic combination into separate roles |
dsec-access-control I1: teller row security on an updatable branch code edu:Question
https://knobit.org/id/register/data-security#SE-305
| dcterms:identifier | SE-305 |
|---|---|
| rdfs:label | dsec-access-control I1: teller row security on an updatable branch code en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises row security on an updatable column |
dsec-access-control I1: the DBA role is not logged edu:Question
https://knobit.org/id/register/data-security#SE-306
| dcterms:identifier | SE-306 |
|---|---|
| rdfs:label | dsec-access-control I1: the DBA role is not logged en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises a privileged role with no logging |
dsec-access-control I1: break-glass has no expiry edu:Question
https://knobit.org/id/register/data-security#SE-307
| dcterms:identifier | SE-307 |
|---|---|
| rdfs:label | dsec-access-control I1: break-glass has no expiry en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises break-glass access with no expiry |
dsec-access-control I1: a role has no owner edu:Question
https://knobit.org/id/register/data-security#SE-308
| dcterms:identifier | SE-308 |
|---|---|
| rdfs:label | dsec-access-control I1: a role has no owner en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises an access role with no owner |
dsec-access-control I2: the analyst can export the full customer list edu:Question
https://knobit.org/id/register/data-security#SE-309
| dcterms:identifier | SE-309 |
|---|---|
| rdfs:label | dsec-access-control I2: the analyst can export the full customer list en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (1.5 points) |
| solvable with | set of Recognises a role granting more than its jobs require |
dsec-access-control I2: the DBA reads personal codes edu:Question
https://knobit.org/id/register/data-security#SE-310
| dcterms:identifier | SE-310 |
|---|---|
| rdfs:label | dsec-access-control I2: the DBA reads personal codes en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (1.5 points) |
| solvable with | set of Recognises an administrator reading restricted data |
dsec-access-control I2: a shared privileged reporting account edu:Question
https://knobit.org/id/register/data-security#SE-311
| dcterms:identifier | SE-311 |
|---|---|
| rdfs:label | dsec-access-control I2: a shared privileged reporting account en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (1.5 points) |
| solvable with | set of Recognises a shared privileged account |
dsec-access-control Q1: least privilege with every duty still covered edu:Question
https://knobit.org/id/register/data-security#SE-312
| dcterms:identifier | SE-312 |
|---|---|
| rdfs:label | dsec-access-control Q1: least privilege with every duty still covered en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | Q1 (1 points) |
| solvable with | set of Removes excess entitlements while keeping every duty covered |
dsec-access-design C1: the PAN masked in the mart and portal but in clear in the agency file edu:Question
https://knobit.org/id/register/data-security#SE-350
| dcterms:identifier | SE-350 |
|---|---|
| rdfs:label | dsec-access-design C1: the PAN masked in the mart and portal but in clear in the agency file en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Recognises masking applied to one copy only |
dsec-access-design C1: an unkeyed hash of the personal code is recoverable and replaced by a keyed method edu:Question
https://knobit.org/id/register/data-security#SE-351
| dcterms:identifier | SE-351 |
|---|---|
| rdfs:label | dsec-access-design C1: an unkeyed hash of the personal code is recoverable and replaced by a keyed method en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Explains data masking and its limits, Explains encryption types |
dsec-access-design C2: the team lead holds propose and approve through two clean roles edu:Question
https://knobit.org/id/register/data-security#SE-352
| dcterms:identifier | SE-352 |
|---|---|
| rdfs:label | dsec-access-design C2: the team lead holds propose and approve through two clean roles en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Recognises a toxic combination across a job's roles |
dsec-access-design C2: the cross-role conflict removed by design, absence cover kept edu:Question
https://knobit.org/id/register/data-security#SE-353
| dcterms:identifier | SE-353 |
|---|---|
| rdfs:label | dsec-access-design C2: the cross-role conflict removed by design, absence cover kept en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Splits a toxic combination into separate roles |
dsec-access-design I1: hardship notes restricted with no access design edu:Question
https://knobit.org/id/register/data-security#SE-354
| dcterms:identifier | SE-354 |
|---|---|
| rdfs:label | dsec-access-design I1: hardship notes restricted with no access design en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (1.5 points) |
| solvable with | set of Recognises a restricted column without access design |
dsec-access-design I1: the confidentiality standard has no special-category class edu:Question
https://knobit.org/id/register/data-security#SE-355
| dcterms:identifier | SE-355 |
|---|---|
| rdfs:label | dsec-access-design I1: the confidentiality standard has no special-category class en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (1.5 points) |
| solvable with | set of Explains data security policy and standards |
dsec-access-design I2: the agency row filter keyed on a value the agency loads edu:Question
https://knobit.org/id/register/data-security#SE-356
| dcterms:identifier | SE-356 |
|---|---|
| rdfs:label | dsec-access-design I2: the agency row filter keyed on a value the agency loads en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2.5 points) |
| solvable with | set of Explains row-level security |
dsec-access-design I2: a shared agency login with the go-live password edu:Question
https://knobit.org/id/register/data-security#SE-357
| dcterms:identifier | SE-357 |
|---|---|
| rdfs:label | dsec-access-design I2: a shared agency login with the go-live password en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2.5 points) |
| solvable with | set of Explains system security risks |
dsec-access-design I2: an internal portal server open to the internet edu:Question
https://knobit.org/id/register/data-security#SE-358
| dcterms:identifier | SE-358 |
|---|---|
| rdfs:label | dsec-access-design I2: an internal portal server open to the internet en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2.5 points) |
| solvable with | set of Explains network and device security terms |
dsec-access-design I2: the agency file and its password in the same e-mail edu:Question
https://knobit.org/id/register/data-security#SE-359
| dcterms:identifier | SE-359 |
|---|---|
| rdfs:label | dsec-access-design I2: the agency file and its password in the same e-mail en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2.5 points) |
| solvable with | set of Explains encryption types |
dsec-access-design I2: an outsourcing contract with no security terms edu:Question
https://knobit.org/id/register/data-security#SE-360
| dcterms:identifier | SE-360 |
|---|---|
| rdfs:label | dsec-access-design I2: an outsourcing contract with no security terms en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2.5 points) |
| solvable with | set of Explains data security implementation |
dsec-access-design I3: collectors can change amounts loaded from core banking edu:Question
https://knobit.org/id/register/data-security#SE-361
| dcterms:identifier | SE-361 |
|---|---|
| rdfs:label | dsec-access-design I3: collectors can change amounts loaded from core banking en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I3 (1.5 points) |
| solvable with | set of Explains data integrity as a security concern |
dsec-access-design I3: a CRUD matrix of jobs against the collections tables edu:Question
https://knobit.org/id/register/data-security#SE-362
| dcterms:identifier | SE-362 |
|---|---|
| rdfs:label | dsec-access-design I3: a CRUD matrix of jobs against the collections tables en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I3 (1.5 points) |
| solvable with | set of Explains data security techniques |
dsec-access-design I3: break-glass granted on an unverified phone call edu:Question
https://knobit.org/id/register/data-security#SE-363
| dcterms:identifier | SE-363 |
|---|---|
| rdfs:label | dsec-access-design I3: break-glass granted on an unverified phone call en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I3 (1.5 points) |
| solvable with | set of Explains privileged and emergency access, Explains hacking, social threats and malware |
dsec-access-design I4: vulnerability, threat and risk told apart per finding edu:Question
https://knobit.org/id/register/data-security#SE-364
| dcterms:identifier | SE-364 |
|---|---|
| rdfs:label | dsec-access-design I4: vulnerability, threat and risk told apart per finding en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I4 (1.5 points) |
| solvable with | set of Explains vulnerability, threat and risk |
dsec-access-design I4: requirement sources classified by kind and place of publication edu:Question
https://knobit.org/id/register/data-security#SE-365
| dcterms:identifier | SE-365 |
|---|---|
| rdfs:label | dsec-access-design I4: requirement sources classified by kind and place of publication en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I4 (1.5 points) |
| solvable with | set of Explains the kinds of rules binding an organisation's data and where they are published |
dsec-access-design I4: open questions sent to the role that decides them edu:Question
https://knobit.org/id/register/data-security#SE-366
| dcterms:identifier | SE-366 |
|---|---|
| rdfs:label | dsec-access-design I4: open questions sent to the role that decides them en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I4 (1.5 points) |
| solvable with | set of Explains the data security organisation |
dsec-access-design Q1: agency controls tagged by type of data security edu:Question
https://knobit.org/id/register/data-security#SE-367
| dcterms:identifier | SE-367 |
|---|---|
| rdfs:label | dsec-access-design Q1: agency controls tagged by type of data security en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | Q1 (1.5 points) |
| solvable with | set of Explains the types of data security |
dsec-access-design Q1: a tool named for each agency control edu:Question
https://knobit.org/id/register/data-security#SE-368
| dcterms:identifier | SE-368 |
|---|---|
| rdfs:label | dsec-access-design Q1: a tool named for each agency control en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | Q1 (1.5 points) |
| solvable with | set of Explains data security tools |
dsec-access-design Q1: implementation, performance and risk metrics edu:Question
https://knobit.org/id/register/data-security#SE-369
| dcterms:identifier | SE-369 |
|---|---|
| rdfs:label | dsec-access-design Q1: implementation, performance and risk metrics en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | Q1 (1.5 points) |
| solvable with | set of Explains data security metrics |
dsec-access-design Q2: why the bank secures the data - risk and business edu:Question
https://knobit.org/id/register/data-security#SE-370
| dcterms:identifier | SE-370 |
|---|---|
| rdfs:label | dsec-access-design Q2: why the bank secures the data - risk and business en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | Q2 (1 points) |
| solvable with | set of Explains the drivers and goals of data security |
dsec-access-design Q2: least privilege with every duty still covered edu:Question
https://knobit.org/id/register/data-security#SE-371
| dcterms:identifier | SE-371 |
|---|---|
| rdfs:label | dsec-access-design Q2: least privilege with every duty still covered en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | Q2 (1 points) |
| solvable with | set of Removes excess entitlements while keeping every duty covered |
dsec-privacy C1: consent named for creditworthiness assessment edu:Question
https://knobit.org/id/register/data-security#SE-401
| dcterms:identifier | SE-401 |
|---|---|
| rdfs:label | dsec-privacy C1: consent named for creditworthiness assessment en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Recognises a wrong or missing lawful basis |
dsec-privacy C1: creditworthiness re-based on legal obligation and contract edu:Question
https://knobit.org/id/register/data-security#SE-402
| dcterms:identifier | SE-402 |
|---|---|
| rdfs:label | dsec-privacy C1: creditworthiness re-based on legal obligation and contract en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Re-bases a processing purpose on the lawful basis the bank relies on |
dsec-privacy C2: marketing reuses the scoring results edu:Question
https://knobit.org/id/register/data-security#SE-403
| dcterms:identifier | SE-403 |
|---|---|
| rdfs:label | dsec-privacy C2: marketing reuses the scoring results en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Recognises further use with no compatibility assessment |
dsec-privacy C2: the reuse put to a compatibility assessment or its own basis edu:Question
https://knobit.org/id/register/data-security#SE-404
| dcterms:identifier | SE-404 |
|---|---|
| rdfs:label | dsec-privacy C2: the reuse put to a compatibility assessment or its own basis en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Raises a further use of data for a compatibility assessment |
dsec-privacy C3: automated scoring has no DPIA edu:Question
https://knobit.org/id/register/data-security#SE-405
| dcterms:identifier | SE-405 |
|---|---|
| rdfs:label | dsec-privacy C3: automated scoring has no DPIA en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (3 points) |
| solvable with | set of Recognises high-risk processing with no DPIA |
dsec-privacy C3: no Art. 22 safeguards on the automated decline edu:Question
https://knobit.org/id/register/data-security#SE-406
| dcterms:identifier | SE-406 |
|---|---|
| rdfs:label | dsec-privacy C3: no Art. 22 safeguards on the automated decline en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (3 points) |
| solvable with | set of Recognises an automated decision with no Art. 22 safeguards |
dsec-privacy C3: a DPIA with safeguards proposed edu:Question
https://knobit.org/id/register/data-security#SE-407
| dcterms:identifier | SE-407 |
|---|---|
| rdfs:label | dsec-privacy C3: a DPIA with safeguards proposed en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (3 points) |
| solvable with | set of Proposes a DPIA with Art. 22 safeguards for automated decisions |
dsec-privacy I1: marital history and social media profile collected edu:Question
https://knobit.org/id/register/data-security#SE-408
| dcterms:identifier | SE-408 |
|---|---|
| rdfs:label | dsec-privacy I1: marital history and social media profile collected en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises data beyond what the purpose requires |
dsec-privacy I1: marketing data kept ten years edu:Question
https://knobit.org/id/register/data-security#SE-409
| dcterms:identifier | SE-409 |
|---|---|
| rdfs:label | dsec-privacy I1: marketing data kept ten years en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises retention beyond every basis |
dsec-privacy I1: collections transfer with no safeguard edu:Question
https://knobit.org/id/register/data-security#SE-410
| dcterms:identifier | SE-410 |
|---|---|
| rdfs:label | dsec-privacy I1: collections transfer with no safeguard en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises a third-country transfer with no safeguard |
dsec-privacy I1: collections processor with no contract edu:Question
https://knobit.org/id/register/data-security#SE-411
| dcterms:identifier | SE-411 |
|---|---|
| rdfs:label | dsec-privacy I1: collections processor with no contract en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises a processor with no contract |
dsec-privacy Q1: conclusions proposed for the DPO and counsel to sign off edu:Question
https://knobit.org/id/register/data-security#SE-412
| dcterms:identifier | SE-412 |
|---|---|
| rdfs:label | dsec-privacy Q1: conclusions proposed for the DPO and counsel to sign off en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | Q1 (1 points) |
| solvable with | set of Raises a decision for its owner instead of taking it |
dsec-processing-records-dpia C1: catch-all purpose improve customer experience reported edu:Question
https://knobit.org/id/register/data-security#SE-450
| dcterms:identifier | SE-450 |
|---|---|
| rdfs:label | dsec-processing-records-dpia C1: catch-all purpose improve customer experience reported en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Recognises a purpose wide enough to allow anything |
dsec-processing-records-dpia C1: catch-all purpose split or suspended, payment data not carried over edu:Question
https://knobit.org/id/register/data-security#SE-451
| dcterms:identifier | SE-451 |
|---|---|
| rdfs:label | dsec-processing-records-dpia C1: catch-all purpose split or suspended, payment data not carried over en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Explains purpose limitation, minimisation and storage limitation |
dsec-processing-records-dpia C2: fraud monitoring record missing Art. 30(1) content reported edu:Question
https://knobit.org/id/register/data-security#SE-452
| dcterms:identifier | SE-452 |
|---|---|
| rdfs:label | dsec-processing-records-dpia C2: fraud monitoring record missing Art. 30(1) content reported en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Recognises an incomplete record of processing |
dsec-processing-records-dpia C2: missing data subjects, recipients and security measures filled or raised edu:Question
https://knobit.org/id/register/data-security#SE-453
| dcterms:identifier | SE-453 |
|---|---|
| rdfs:label | dsec-processing-records-dpia C2: missing data subjects, recipients and security measures filled or raised en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Explains the record of processing activities |
dsec-processing-records-dpia C3: AML due diligence re-based from consent to legal obligation edu:Question
https://knobit.org/id/register/data-security#SE-454
| dcterms:identifier | SE-454 |
|---|---|
| rdfs:label | dsec-processing-records-dpia C3: AML due diligence re-based from consent to legal obligation en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (3 points) |
| solvable with | set of Recognises a wrong or missing lawful basis |
dsec-processing-records-dpia C3: payment execution re-based from legitimate interest to contract edu:Question
https://knobit.org/id/register/data-security#SE-455
| dcterms:identifier | SE-455 |
|---|---|
| rdfs:label | dsec-processing-records-dpia C3: payment execution re-based from legitimate interest to contract en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (3 points) |
| solvable with | set of Recognises a wrong or missing lawful basis |
dsec-processing-records-dpia C3: newsletter consent and biometric explicit consent left alone edu:Question
https://knobit.org/id/register/data-security#SE-456
| dcterms:identifier | SE-456 |
|---|---|
| rdfs:label | dsec-processing-records-dpia C3: newsletter consent and biometric explicit consent left alone en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (3 points) |
| solvable with | set of Explains the lawful bases for processing |
dsec-processing-records-dpia C4: biometric onboarding screened as DPIA required edu:Question
https://knobit.org/id/register/data-security#SE-457
| dcterms:identifier | SE-457 |
|---|---|
| rdfs:label | dsec-processing-records-dpia C4: biometric onboarding screened as DPIA required en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C4 (3 points) |
| solvable with | set of Recognises high-risk processing with no DPIA |
dsec-processing-records-dpia C4: automatic rejection given Art. 22(3) safeguards edu:Question
https://knobit.org/id/register/data-security#SE-458
| dcterms:identifier | SE-458 |
|---|---|
| rdfs:label | dsec-processing-records-dpia C4: automatic rejection given Art. 22(3) safeguards en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C4 (3 points) |
| solvable with | set of Recognises an automated decision with no Art. 22 safeguards |
dsec-processing-records-dpia C4: newsletter screened as no DPIA, existing DPIA kept edu:Question
https://knobit.org/id/register/data-security#SE-459
| dcterms:identifier | SE-459 |
|---|---|
| rdfs:label | dsec-processing-records-dpia C4: newsletter screened as no DPIA, existing DPIA kept en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C4 (3 points) |
| solvable with | set of Explains DPIA triggers and automated decisions |
dsec-processing-records-dpia I1: biometric vendor with no Art. 28 contract edu:Question
https://knobit.org/id/register/data-security#SE-460
| dcterms:identifier | SE-460 |
|---|---|
| rdfs:label | dsec-processing-records-dpia I1: biometric vendor with no Art. 28 contract en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises a processor with no contract |
dsec-processing-records-dpia I1: vendor support access from India with no safeguard edu:Question
https://knobit.org/id/register/data-security#SE-461
| dcterms:identifier | SE-461 |
|---|---|
| rdfs:label | dsec-processing-records-dpia I1: vendor support access from India with no safeguard en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises a third-country transfer with no safeguard |
dsec-processing-records-dpia I1: Art. 46 safeguard with transfer impact assessment, or transfer suspended edu:Question
https://knobit.org/id/register/data-security#SE-462
| dcterms:identifier | SE-462 |
|---|---|
| rdfs:label | dsec-processing-records-dpia I1: Art. 46 safeguard with transfer impact assessment, or transfer suspended en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Explains processors and international transfers |
dsec-processing-records-dpia I1: Swiss transfer on adequacy left alone edu:Question
https://knobit.org/id/register/data-security#SE-463
| dcterms:identifier | SE-463 |
|---|---|
| rdfs:label | dsec-processing-records-dpia I1: Swiss transfer on adequacy left alone en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Explains processors and international transfers |
dsec-processing-records-dpia I2: indefinite AML retention replaced by the legal period edu:Question
https://knobit.org/id/register/data-security#SE-464
| dcterms:identifier | SE-464 |
|---|---|
| rdfs:label | dsec-processing-records-dpia I2: indefinite AML retention replaced by the legal period en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (1 points) |
| solvable with | set of Recognises retention beyond every basis |
dsec-processing-records-dpia Q1: conclusions proposed for DPO and legal counsel sign-off edu:Question
https://knobit.org/id/register/data-security#SE-465
| dcterms:identifier | SE-465 |
|---|---|
| rdfs:label | dsec-processing-records-dpia Q1: conclusions proposed for DPO and legal counsel sign-off en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | Q1 (1 points) |
| solvable with | set of Raises a decision for its owner instead of taking it |
dsec-monitoring-audit C1: DBAs can truncate the audit table that records them edu:Question
https://knobit.org/id/register/data-security#SE-501
| dcterms:identifier | SE-501 |
|---|---|
| rdfs:label | dsec-monitoring-audit C1: DBAs can truncate the audit table that records them en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Recognises an audit trail administrators can edit |
dsec-monitoring-audit C1: log integrity separated from the people logged edu:Question
https://knobit.org/id/register/data-security#SE-502
| dcterms:identifier | SE-502 |
|---|---|
| rdfs:label | dsec-monitoring-audit C1: log integrity separated from the people logged en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (2 points) |
| solvable with | set of Separates log integrity from the people logged |
dsec-monitoring-audit C2: fourteen unconfirmed accounts left active edu:Question
https://knobit.org/id/register/data-security#SE-503
| dcterms:identifier | SE-503 |
|---|---|
| rdfs:label | dsec-monitoring-audit C2: fourteen unconfirmed accounts left active en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Recognises rejected access still active |
dsec-monitoring-audit C2: unconfirmed access revoked edu:Question
https://knobit.org/id/register/data-security#SE-504
| dcterms:identifier | SE-504 |
|---|---|
| rdfs:label | dsec-monitoring-audit C2: unconfirmed access revoked en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (2 points) |
| solvable with | set of Revokes access a review did not confirm |
dsec-monitoring-audit C3: the team lead recertifies their own access edu:Question
https://knobit.org/id/register/data-security#SE-505
| dcterms:identifier | SE-505 |
|---|---|
| rdfs:label | dsec-monitoring-audit C3: the team lead recertifies their own access en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (2 points) |
| solvable with | set of Recognises an access recertification by the holder |
dsec-monitoring-audit C3: an independent reviewer assigned edu:Question
https://knobit.org/id/register/data-security#SE-506
| dcterms:identifier | SE-506 |
|---|---|
| rdfs:label | dsec-monitoring-audit C3: an independent reviewer assigned en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (2 points) |
| solvable with | set of Assigns an independent reviewer to an access recertification |
dsec-monitoring-audit I1: break-glass sessions not logged edu:Question
https://knobit.org/id/register/data-security#SE-507
| dcterms:identifier | SE-507 |
|---|---|
| rdfs:label | dsec-monitoring-audit I1: break-glass sessions not logged en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises privileged access not logged |
dsec-monitoring-audit I1: service account reads of PANs not logged edu:Question
https://knobit.org/id/register/data-security#SE-508
| dcterms:identifier | SE-508 |
|---|---|
| rdfs:label | dsec-monitoring-audit I1: service account reads of PANs not logged en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises restricted reads not logged |
dsec-monitoring-audit I1: audit logs kept 90 days edu:Question
https://knobit.org/id/register/data-security#SE-509
| dcterms:identifier | SE-509 |
|---|---|
| rdfs:label | dsec-monitoring-audit I1: audit logs kept 90 days en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises log retention shorter than required |
dsec-monitoring-audit I1: an alert with no responder edu:Question
https://knobit.org/id/register/data-security#SE-510
| dcterms:identifier | SE-510 |
|---|---|
| rdfs:label | dsec-monitoring-audit I1: an alert with no responder en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (2 points) |
| solvable with | set of Recognises a monitoring rule with no threshold or response |
dsec-monitoring-audit Q1: retention cited to PCI DSS Req. 10.5.1, no invented figures edu:Question
https://knobit.org/id/register/data-security#SE-511
| dcterms:identifier | SE-511 |
|---|---|
| rdfs:label | dsec-monitoring-audit Q1: retention cited to PCI DSS Req. 10.5.1, no invented figures en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | Q1 (1 points) |
| solvable with | set of Explains PCI DSS audit log retention |
dsec-log-integrity-recertification C1: the restricted-read log with no reviewer and no review on record edu:Question
https://knobit.org/id/register/data-security#SE-550
| dcterms:identifier | SE-550 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification C1: the restricted-read log with no reviewer and no review on record en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (3 points) |
| solvable with | set of Recognises a log nobody reviews |
dsec-log-integrity-recertification C1: a log with a reviewer but no frequency, reviewed once ad hoc edu:Question
https://knobit.org/id/register/data-security#SE-551
| dcterms:identifier | SE-551 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification C1: a log with a reviewer but no frequency, reviewed once ad hoc en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (3 points) |
| solvable with | set of Recognises a log nobody reviews |
dsec-log-integrity-recertification C1: unreviewed logs given a named reviewer and a stated frequency edu:Question
https://knobit.org/id/register/data-security#SE-552
| dcterms:identifier | SE-552 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification C1: unreviewed logs given a named reviewer and a stated frequency en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C1 (3 points) |
| solvable with | set of Recognises a log nobody reviews |
dsec-log-integrity-recertification C2: quarterly DBA recertification last run two quarters ago edu:Question
https://knobit.org/id/register/data-security#SE-553
| dcterms:identifier | SE-553 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification C2: quarterly DBA recertification last run two quarters ago en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (3 points) |
| solvable with | set of Recognises an overdue recertification |
dsec-log-integrity-recertification C2: annual recertification of unmasked readers overdue edu:Question
https://knobit.org/id/register/data-security#SE-554
| dcterms:identifier | SE-554 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification C2: annual recertification of unmasked readers overdue en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (3 points) |
| solvable with | set of Recognises an overdue recertification |
dsec-log-integrity-recertification C2: overdue campaigns scheduled to run now, not at the next slot edu:Question
https://knobit.org/id/register/data-security#SE-555
| dcterms:identifier | SE-555 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification C2: overdue campaigns scheduled to run now, not at the next slot en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C2 (3 points) |
| solvable with | set of Recognises an overdue recertification |
dsec-log-integrity-recertification C3: break-glass role in no recertification campaign edu:Question
https://knobit.org/id/register/data-security#SE-556
| dcterms:identifier | SE-556 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification C3: break-glass role in no recertification campaign en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (3 points) |
| solvable with | set of Recognises privileged access outside recertification |
dsec-log-integrity-recertification C3: service account reading restricted data in no campaign edu:Question
https://knobit.org/id/register/data-security#SE-557
| dcterms:identifier | SE-557 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification C3: service account reading restricted data in no campaign en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (3 points) |
| solvable with | set of Recognises privileged access outside recertification |
dsec-log-integrity-recertification C3: uncovered roles put into a campaign with an independent reviewer edu:Question
https://knobit.org/id/register/data-security#SE-558
| dcterms:identifier | SE-558 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification C3: uncovered roles put into a campaign with an independent reviewer en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | C3 (3 points) |
| solvable with | set of Recognises privileged access outside recertification, Assigns an independent reviewer to an access recertification |
dsec-log-integrity-recertification I1: semi-annual campaign not yet due left alone edu:Question
https://knobit.org/id/register/data-security#SE-559
| dcterms:identifier | SE-559 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification I1: semi-annual campaign not yet due left alone en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (1.5 points) |
| solvable with | set of Recognises an overdue recertification |
dsec-log-integrity-recertification I1: retired role with no holders not flagged as outside recertification edu:Question
https://knobit.org/id/register/data-security#SE-560
| dcterms:identifier | SE-560 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification I1: retired role with no holders not flagged as outside recertification en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (1.5 points) |
| solvable with | set of Recognises privileged access outside recertification |
dsec-log-integrity-recertification I1: log with weekly reviews on record left alone edu:Question
https://knobit.org/id/register/data-security#SE-561
| dcterms:identifier | SE-561 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification I1: log with weekly reviews on record left alone en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I1 (1.5 points) |
| solvable with | set of Recognises a log nobody reviews |
dsec-log-integrity-recertification I2: a log entry records who, what, when, from where and the result edu:Question
https://knobit.org/id/register/data-security#SE-562
| dcterms:identifier | SE-562 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification I2: a log entry records who, what, when, from where and the result en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2 points) |
| solvable with | set of Explains logging and monitoring of data access |
dsec-log-integrity-recertification I2: logs protected from the people they record edu:Question
https://knobit.org/id/register/data-security#SE-563
| dcterms:identifier | SE-563 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification I2: logs protected from the people they record en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2 points) |
| solvable with | set of Explains logging and monitoring of data access |
dsec-log-integrity-recertification I2: every log reviewed by a named reviewer at a stated frequency edu:Question
https://knobit.org/id/register/data-security#SE-564
| dcterms:identifier | SE-564 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification I2: every log reviewed by a named reviewer at a stated frequency en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2 points) |
| solvable with | set of Explains logging and monitoring of data access |
dsec-log-integrity-recertification I2: monitoring rules with a threshold and a responder edu:Question
https://knobit.org/id/register/data-security#SE-565
| dcterms:identifier | SE-565 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification I2: monitoring rules with a threshold and a responder en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I2 (2 points) |
| solvable with | set of Explains logging and monitoring of data access |
dsec-log-integrity-recertification I3: recertification is periodic, on a stated frequency, run on time edu:Question
https://knobit.org/id/register/data-security#SE-566
| dcterms:identifier | SE-566 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification I3: recertification is periodic, on a stated frequency, run on time en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I3 (2 points) |
| solvable with | set of Explains access recertification |
dsec-log-integrity-recertification I3: recertified by someone who does not hold the access edu:Question
https://knobit.org/id/register/data-security#SE-567
| dcterms:identifier | SE-567 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification I3: recertified by someone who does not hold the access en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I3 (2 points) |
| solvable with | set of Explains access recertification |
dsec-log-integrity-recertification I3: unconfirmed or rejected access revoked with evidence edu:Question
https://knobit.org/id/register/data-security#SE-568
| dcterms:identifier | SE-568 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification I3: unconfirmed or rejected access revoked with evidence en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I3 (2 points) |
| solvable with | set of Explains access recertification |
dsec-log-integrity-recertification I3: every privileged and restricted-data role in scope, service and emergency accounts included edu:Question
https://knobit.org/id/register/data-security#SE-569
| dcterms:identifier | SE-569 |
|---|---|
| rdfs:label | dsec-log-integrity-recertification I3: every privileged and restricted-data role in scope, service and emergency accounts included en |
| schema:isPartOf | Data security and privacy (DAMA-DMBOK2) |
| schema:isPartOf | I3 (2 points) |
| solvable with | set of Explains access recertification |
Identify data security requirements edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-1
| dcterms:description | Business and regulatory requirements for protecting data. en |
|---|---|
| dcterms:identifier | SV-1 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.1 en |
| includes knobit | Explains the kinds of rules binding an organisation's data and where they are published |
| includes knobit | Traces the scope consequence of a regulated data copy |
| includes knobit | Raises a requirement conflict for the owner of the interpretation |
| includes knobit | Explains the regulatory requirements register |
| includes knobit | Explains which regulations cover which bank data |
| rdfs:label | Identify data security requirements en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 2.1 |
Vulnerability, threat, risk, risk classifications; assess current risks edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-10
| dcterms:description | Security risk. en |
|---|---|
| dcterms:identifier | SV-10 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.1-1.3.4, 2.4 en |
| includes knobit | Explains vulnerability, threat and risk |
| rdfs:label | Vulnerability, threat, risk, risk classifications; assess current risks en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.3.1-1.3.4, 2.4 |
Data security organisation edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-11
| dcterms:description | Who does data security. en |
|---|---|
| dcterms:identifier | SV-11 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.5 en |
| includes knobit | Explains the data security organisation |
| rdfs:label | Data security organisation en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.3.5 |
Data integrity edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-12
| dcterms:description | Integrity as a security goal. en |
|---|---|
| dcterms:identifier | SV-12 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.7 en |
| includes knobit | Explains data integrity as a security concern |
| rdfs:label | Data integrity en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.3.7 |
Encryption edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-13
| dcterms:description | Hash, symmetric and public-key encryption. en |
|---|---|
| dcterms:identifier | SV-13 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.8 en |
| includes knobit | Explains encryption types |
| rdfs:label | Encryption en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.3.8 |
Network security terms edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-14
| dcterms:description | Network and device security vocabulary. en |
|---|---|
| dcterms:identifier | SV-14 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.10 en |
| includes knobit | Explains network and device security terms |
| rdfs:label | Network security terms en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.3.10 |
Types of data security edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-15
| dcterms:description | Facility, device, credential, document security. en |
|---|---|
| dcterms:identifier | SV-15 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.11 en |
| includes knobit | Explains the types of data security |
| rdfs:label | Types of data security en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.3.11 |
System security risks edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-16
| dcterms:description | Privilege abuse, injection, default passwords, backup abuse. en |
|---|---|
| dcterms:identifier | SV-16 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.13 en |
| includes knobit | Explains system security risks |
| rdfs:label | System security risks en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.3.13 |
Hacking, social threats, malware edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-17
| dcterms:description | Attack types. en |
|---|---|
| dcterms:identifier | SV-17 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.14-1.3.16 en |
| includes knobit | Explains hacking, social threats and malware |
| rdfs:label | Hacking, social threats, malware en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.3.14-1.3.16 |
Define data security policy and standards edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-18
| dcterms:description | Policy and the standards it rests on. en |
|---|---|
| dcterms:identifier | SV-18 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.2-2.3 en |
| includes knobit | Explains data security policy and standards |
| rdfs:label | Define data security policy and standards en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 2.2-2.3 |
Tools edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-19
| dcterms:description | Security tools. en |
|---|---|
| dcterms:identifier | SV-19 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 3 en |
| includes knobit | Explains data security tools |
| rdfs:label | Tools en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 3 |
Types of data security restrictions edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-2
| dcterms:description | Confidential and regulated data: personal data, financial data, PCI DSS cardholder data. en |
|---|---|
| dcterms:identifier | SV-2 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.12 en |
| includes knobit | Explains PCI DSS scope |
| includes knobit | Explains PCI DSS requirements on stored card data |
| includes knobit | Explains the limits of erasure against legal retention |
| includes knobit | Explains special categories of personal data |
| rdfs:label | Types of data security restrictions en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.3.12 |
Techniques edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-20
| dcterms:description | Security techniques. en |
|---|---|
| dcterms:identifier | SV-20 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 4 en |
| includes knobit | Explains data security techniques |
| rdfs:label | Techniques en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 4 |
Implementation guidelines edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-21
| dcterms:description | Readiness, culture, outsourcing, cloud. en |
|---|---|
| dcterms:identifier | SV-21 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 5 en |
| includes knobit | Explains data security implementation |
| rdfs:label | Implementation guidelines en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 5 |
Data security governance: metrics edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-22
| dcterms:description | Measuring data security. en |
|---|---|
| dcterms:identifier | SV-22 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 6 en |
| includes knobit | Explains data security metrics |
| rdfs:label | Data security governance: metrics en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 6 |
Define data security standards: confidentiality levels and regulatory categories edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-3
| dcterms:description | Classification of data by confidentiality and by the regulations that apply. en |
|---|---|
| dcterms:identifier | SV-3 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.3 en |
| includes knobit | Propagates classification to derived columns |
| includes knobit | Explains a data classification scheme |
| includes knobit | Explains classification of derived data |
| rdfs:label | Define data security standards: confidentiality levels and regulatory categories en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 2.3 |
Obfuscation or masking; de-identification edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-4
| dcterms:description | Making data unreadable or non-identifying. en |
|---|---|
| dcterms:identifier | SV-4 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.9 en |
| includes knobit | Explains anonymisation against pseudonymisation |
| rdfs:label | Obfuscation or masking; de-identification en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.3.9 |
Data security processes: access, authentication, authorisation, entitlement edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-5
| dcterms:description | The four A's and entitlement management. en |
|---|---|
| dcterms:identifier | SV-5 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.6 en |
| includes knobit | Explains segregation of duties |
| includes knobit | Splits a toxic combination into separate roles |
| includes knobit | Removes excess entitlements while keeping every duty covered |
| includes knobit | Explains least-privilege access design |
| includes knobit | Explains row-level security |
| rdfs:label | Data security processes: access, authentication, authorisation, entitlement en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.3.6 |
Implement controls: manage users, roles and permissions; control access to restricted data edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-6
| dcterms:description | Role-based access, views, masking and privileged access. en |
|---|---|
| dcterms:identifier | SV-6 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.5 en |
| includes knobit | Closes the clear-text paths around a masked column |
| includes knobit | Explains data masking and its limits |
| includes knobit | Explains privileged and emergency access |
| rdfs:label | Implement controls: manage users, roles and permissions; control access to restricted data en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 2.5 |
Regulated data: personal data and privacy obligations edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-7
Monitor user authentication and access behaviour; manage security policy compliance (auditing) edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-8
| dcterms:description | Logging, monitoring, access reviews and audits. en |
|---|---|
| dcterms:identifier | SV-8 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.5 en |
| includes knobit | Separates log integrity from the people logged |
| includes knobit | Revokes access a review did not confirm |
| includes knobit | Assigns an independent reviewer to an access recertification |
| includes knobit | Explains logging and monitoring of data access |
| includes knobit | Explains access recertification |
| includes knobit | Explains PCI DSS audit log retention |
| rdfs:label | Monitor user authentication and access behaviour; manage security policy compliance (auditing) en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 2.5 |
Business drivers, goals and principles edu:LearningOutcome
https://knobit.org/id/register/data-security#SV-9
| dcterms:description | Why data security matters to the bank. en |
|---|---|
| dcterms:identifier | SV-9 |
| dcterms:source | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.1-1.2 en |
| includes knobit | Explains the drivers and goals of data security |
| rdfs:label | Business drivers, goals and principles en |
| schema:isPartOf | DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security |
| skos:notation | 1.1-1.2 |