@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix edu: <https://knobit.org/def/> .
@prefix knobit: <https://knobit.org/id/knobit/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix register: <https://knobit.org/id/register/> .
@prefix schema: <https://schema.org/> .
@prefix skos: <http://www.w3.org/2004/02/skos/core#> .

<https://knobit.org/id/register/data-security#SE-101> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements C1: PCI DSS cited for IBAN encryption"@en ;
    dcterms:identifier "SE-101" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-102 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/C1> .

<https://knobit.org/id/register/data-security#SE-102> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements C1: the PAN copy in the warehouse is outside RQ-004's scope"@en ;
    dcterms:identifier "SE-102" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-108 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/C1> .

<https://knobit.org/id/register/data-security#SE-103> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements C1: what the copy brings into PCI DSS scope"@en ;
    dcterms:identifier "SE-103" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-131 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/C1> .

<https://knobit.org/id/register/data-security#SE-104> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements C2: erasure against AML retention"@en ;
    dcterms:identifier "SE-104" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-110 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/C2> .

<https://knobit.org/id/register/data-security#SE-105> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements C2: the conflict raised with the DPO under Art. 17(3)(b)"@en ;
    dcterms:identifier "SE-105" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-132 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/C2> .

<https://knobit.org/id/register/data-security#SE-106> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements I1: RQ-002 has no control"@en ;
    dcterms:identifier "SE-106" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-101 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/I1> .

<https://knobit.org/id/register/data-security#SE-107> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements I1: RQ-006 has no data scope"@en ;
    dcterms:identifier "SE-107" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-103 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/I1> .

<https://knobit.org/id/register/data-security#SE-108> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements I1: RQ-005 cites a requirement PCI DSS does not have"@en ;
    dcterms:identifier "SE-108" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-104 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/I1> .

<https://knobit.org/id/register/data-security#SE-109> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements I1: CT-006 has no owner"@en ;
    dcterms:identifier "SE-109" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-105 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/I1> .

<https://knobit.org/id/register/data-security#SE-110> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements I1: CT-007 has no evidence"@en ;
    dcterms:identifier "SE-110" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:G-403 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/I1> .

<https://knobit.org/id/register/data-security#SE-111> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements I1: DORA produced no requirements"@en ;
    dcterms:identifier "SE-111" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-107 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/I1> .

<https://knobit.org/id/register/data-security#SE-112> a edu:Question ;
    rdfs:label "dsec-regulatory-requirements I2: the nightly CVV purge cannot meet Req. 3.3.1"@en ;
    dcterms:identifier "SE-112" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-109 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-regulatory-requirements/I2> .

<https://knobit.org/id/register/data-security#SE-150> a edu:Question ;
    rdfs:label "dsec-requirements-classification C1: security codes read out on calls are stored in recordings and transcripts"@en ;
    dcterms:identifier "SE-150" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-205 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/C1> .

<https://knobit.org/id/register/data-security#SE-151> a edu:Question ;
    rdfs:label "dsec-requirements-classification C1: card numbers spoken on calls bring the contact-centre platform into PCI DSS scope"@en ;
    dcterms:identifier "SE-151" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-131 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/C1> .

<https://knobit.org/id/register/data-security#SE-152> a edu:Question ;
    rdfs:label "dsec-requirements-classification C1: a PCI DSS requirement cites the retired v3.2.1"@en ;
    dcterms:identifier "SE-152" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-104 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/C1> .

<https://knobit.org/id/register/data-security#SE-153> a edu:Question ;
    rdfs:label "dsec-requirements-classification I2: DORA excluded because the platform is a vendor SaaS"@en ;
    dcterms:identifier "SE-153" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-107 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/I2> .

<https://knobit.org/id/register/data-security#SE-154> a edu:Question ;
    rdfs:label "dsec-requirements-classification I2: banking secrecy excluded although calls discuss customers' accounts"@en ;
    dcterms:identifier "SE-154" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-107 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/I2> .

<https://knobit.org/id/register/data-security#SE-155> a edu:Question ;
    rdfs:label "dsec-requirements-classification I3: the erasure request decided per record type against AML retention"@en ;
    dcterms:identifier "SE-155" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-155 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/I3> .

<https://knobit.org/id/register/data-security#SE-156> a edu:Question ;
    rdfs:label "dsec-requirements-classification I3: the erase-everything control corrected and the precedence put to the DPO"@en ;
    dcterms:identifier "SE-156" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-132 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/I3> .

<https://knobit.org/id/register/data-security#SE-157> a edu:Question ;
    rdfs:label "dsec-requirements-classification I4: every requirement records provision, scope, control, owner and evidence"@en ;
    dcterms:identifier "SE-157" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-151 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/I4> .

<https://knobit.org/id/register/data-security#SE-1801> a edu:Question ;
    rdfs:label "Special categories of personal data"@en ;
    dcterms:identifier "SE-1801" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:K12-70093 ] ;
    schema:isPartOf register:data-security ;
    schema:learningResourceType "multiple_choice" ;
    schema:text "Which is a special category of personal data? (a) name; (b) health data; (c) e-mail address; (d) year of birth"@en .

<https://knobit.org/id/register/data-security#SE-1802> a edu:Question ;
    rdfs:label "Database structure"@en ;
    dcterms:identifier "SE-1802" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:K12-69062 ] ;
    schema:isPartOf register:data-security ;
    schema:learningResourceType "multiple_choice" ;
    schema:text "What is the primary key of a table for? (a) it identifies each row uniquely; (b) it sets the colour of a column; (c) it deletes the table; (d) it counts the columns"@en .

<https://knobit.org/id/register/data-security#SE-1803> a edu:Question ;
    rdfs:label "Legal basis for processing"@en ;
    dcterms:identifier "SE-1803" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:K12-70095 ] ;
    schema:isPartOf register:data-security ;
    schema:learningResourceType "multiple_choice" ;
    schema:text "A shop delivers an ordered product to a customer and processes the customer's address to do so. Which legal basis is this? (a) consent; (b) contract; (c) legitimate interest; (d) performance of a public task"@en .

<https://knobit.org/id/register/data-security#SE-1804> a edu:Question ;
    rdfs:label "Kinds of legal texts"@en ;
    dcterms:identifier "SE-1804" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:K12-57100 ] ;
    schema:isPartOf register:data-security ;
    schema:learningResourceType "multiple_choice" ;
    schema:text "Where is the text of an Estonian act in force found? (a) in Riigi Teataja; (b) in newspaper notices; (c) in the tables of Statistics Estonia; (d) on a games portal"@en .

<https://knobit.org/id/register/data-security#SE-1901> a edu:Question ;
    rdfs:label "Binding force of a data security requirement's source"@en ;
    dcterms:identifier "SE-1901" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:G-1901 ] ;
    schema:isPartOf register:data-security ;
    schema:learningResourceType "multiple_choice" ;
    schema:text "A requirements register lists GDPR Art. 32, DORA, the EBA Guidelines on ICT and security risk management and PCI DSS. Which one binds the bank only through its contracts with the card schemes? (a) PCI DSS; (b) GDPR; (c) DORA; (d) the EBA Guidelines"@en .

<https://knobit.org/id/register/data-security#SE-201> a edu:Question ;
    rdfs:label "dsec-classification C1: the full PAN in the analytics table is classified internal"@en ;
    dcterms:identifier "SE-201" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-201 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/C1> .

<https://knobit.org/id/register/data-security#SE-202> a edu:Question ;
    rdfs:label "dsec-classification C1: the analytics table and its consumers enter PCI DSS scope, its derived columns inherit"@en ;
    dcterms:identifier "SE-202" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-131,
                knobit:S-231 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/C1> .

<https://knobit.org/id/register/data-security#SE-203> a edu:Question ;
    rdfs:label "dsec-classification C2: the hashed personal code is pseudonymous, not anonymous"@en ;
    dcterms:identifier "SE-203" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-207 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/C2> .

<https://knobit.org/id/register/data-security#SE-204> a edu:Question ;
    rdfs:label "dsec-classification C2: the merchant-by-day aggregate has cells of one customer"@en ;
    dcterms:identifier "SE-204" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-203 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/C2> .

<https://knobit.org/id/register/data-security#SE-205> a edu:Question ;
    rdfs:label "dsec-classification I1: a CVV column is stored"@en ;
    dcterms:identifier "SE-205" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-205 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/I1> .

<https://knobit.org/id/register/data-security#SE-206> a edu:Question ;
    rdfs:label "dsec-classification I1: the personal code is below its category's minimum"@en ;
    dcterms:identifier "SE-206" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-206 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/I1> .

<https://knobit.org/id/register/data-security#SE-207> a edu:Question ;
    rdfs:label "dsec-classification I1: the employer name is unclassified"@en ;
    dcterms:identifier "SE-207" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-204 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/I1> .

<https://knobit.org/id/register/data-security#SE-208> a edu:Question ;
    rdfs:label "dsec-classification I1: hardship notes hold health data"@en ;
    dcterms:identifier "SE-208" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-208 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/I1> .

<https://knobit.org/id/register/data-security#SE-209> a edu:Question ;
    rdfs:label "dsec-classification I2: first six and last six is not a truncation"@en ;
    dcterms:identifier "SE-209" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-209 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/I2> .

<https://knobit.org/id/register/data-security#SE-210> a edu:Question ;
    rdfs:label "dsec-classification I2: birth date below its source"@en ;
    dcterms:identifier "SE-210" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-202 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/I2> .

<https://knobit.org/id/register/data-security#SE-211> a edu:Question ;
    rdfs:label "dsec-classification I2: IBAN classified differently in the physical model"@en ;
    dcterms:identifier "SE-211" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-210 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/I2> .

<https://knobit.org/id/register/data-security#SE-212> a edu:Question ;
    rdfs:label "dsec-classification I2: restricted has no handling rules"@en ;
    dcterms:identifier "SE-212" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-211 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-classification/I2> .

<https://knobit.org/id/register/data-security#SE-250> a edu:Question ;
    rdfs:label "dsec-requirements-classification C2: tokenised transcripts with the key kept are pseudonymised, not anonymous"@en ;
    dcterms:identifier "SE-250" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-207 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/C2> .

<https://knobit.org/id/register/data-security#SE-251> a edu:Question ;
    rdfs:label "dsec-requirements-classification C2: per-agent daily statistics single out each agent"@en ;
    dcterms:identifier "SE-251" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-203 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/C2> .

<https://knobit.org/id/register/data-security#SE-252> a edu:Question ;
    rdfs:label "dsec-requirements-classification C3: a voiceprint is biometric special category data"@en ;
    dcterms:identifier "SE-252" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-208 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/C3> .

<https://knobit.org/id/register/data-security#SE-253> a edu:Question ;
    rdfs:label "dsec-requirements-classification C3: call transcripts reveal health data"@en ;
    dcterms:identifier "SE-253" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-208 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/C3> .

<https://knobit.org/id/register/data-security#SE-254> a edu:Question ;
    rdfs:label "dsec-requirements-classification I1: an LLM summary of a transcript inherits its classification"@en ;
    dcterms:identifier "SE-254" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-202 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/I1> .

<https://knobit.org/id/register/data-security#SE-255> a edu:Question ;
    rdfs:label "dsec-requirements-classification I1: a per-call sentiment score is not public"@en ;
    dcterms:identifier "SE-255" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-202 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/I1> .

<https://knobit.org/id/register/data-security#SE-256> a edu:Question ;
    rdfs:label "dsec-requirements-classification I4: every column at a level of the scheme, none unclassified"@en ;
    dcterms:identifier "SE-256" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-204 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-requirements-classification/I4> .

<https://knobit.org/id/register/data-security#SE-301> a edu:Question ;
    rdfs:label "dsec-access-control C1: the analyst's masked personal code is joinable to the clear customer table"@en ;
    dcterms:identifier "SE-301" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-304 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/C1> .

<https://knobit.org/id/register/data-security#SE-302> a edu:Question ;
    rdfs:label "dsec-access-control C1: the join path closed"@en ;
    dcterms:identifier "SE-302" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-332 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/C1> .

<https://knobit.org/id/register/data-security#SE-303> a edu:Question ;
    rdfs:label "dsec-access-control C2: the payments operator can create and approve"@en ;
    dcterms:identifier "SE-303" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-302 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/C2> .

<https://knobit.org/id/register/data-security#SE-304> a edu:Question ;
    rdfs:label "dsec-access-control C2: the conflict split into roles, not only monitored"@en ;
    dcterms:identifier "SE-304" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-331 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/C2> .

<https://knobit.org/id/register/data-security#SE-305> a edu:Question ;
    rdfs:label "dsec-access-control I1: teller row security on an updatable branch code"@en ;
    dcterms:identifier "SE-305" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-305 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/I1> .

<https://knobit.org/id/register/data-security#SE-306> a edu:Question ;
    rdfs:label "dsec-access-control I1: the DBA role is not logged"@en ;
    dcterms:identifier "SE-306" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-306 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/I1> .

<https://knobit.org/id/register/data-security#SE-307> a edu:Question ;
    rdfs:label "dsec-access-control I1: break-glass has no expiry"@en ;
    dcterms:identifier "SE-307" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-307 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/I1> .

<https://knobit.org/id/register/data-security#SE-308> a edu:Question ;
    rdfs:label "dsec-access-control I1: a role has no owner"@en ;
    dcterms:identifier "SE-308" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-308 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/I1> .

<https://knobit.org/id/register/data-security#SE-309> a edu:Question ;
    rdfs:label "dsec-access-control I2: the analyst can export the full customer list"@en ;
    dcterms:identifier "SE-309" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-301 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/I2> .

<https://knobit.org/id/register/data-security#SE-310> a edu:Question ;
    rdfs:label "dsec-access-control I2: the DBA reads personal codes"@en ;
    dcterms:identifier "SE-310" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-309 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/I2> .

<https://knobit.org/id/register/data-security#SE-311> a edu:Question ;
    rdfs:label "dsec-access-control I2: a shared privileged reporting account"@en ;
    dcterms:identifier "SE-311" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-311 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/I2> .

<https://knobit.org/id/register/data-security#SE-312> a edu:Question ;
    rdfs:label "dsec-access-control Q1: least privilege with every duty still covered"@en ;
    dcterms:identifier "SE-312" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-333 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-control/Q1> .

<https://knobit.org/id/register/data-security#SE-350> a edu:Question ;
    rdfs:label "dsec-access-design C1: the PAN masked in the mart and portal but in clear in the agency file"@en ;
    dcterms:identifier "SE-350" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-310 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/C1> .

<https://knobit.org/id/register/data-security#SE-351> a edu:Question ;
    rdfs:label "dsec-access-design C1: an unkeyed hash of the personal code is recoverable and replaced by a keyed method"@en ;
    dcterms:identifier "SE-351" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-353,
                knobit:S-905 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/C1> .

<https://knobit.org/id/register/data-security#SE-352> a edu:Question ;
    rdfs:label "dsec-access-design C2: the team lead holds propose and approve through two clean roles"@en ;
    dcterms:identifier "SE-352" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-303 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/C2> .

<https://knobit.org/id/register/data-security#SE-353> a edu:Question ;
    rdfs:label "dsec-access-design C2: the cross-role conflict removed by design, absence cover kept"@en ;
    dcterms:identifier "SE-353" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-331 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/C2> .

<https://knobit.org/id/register/data-security#SE-354> a edu:Question ;
    rdfs:label "dsec-access-design I1: hardship notes restricted with no access design"@en ;
    dcterms:identifier "SE-354" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:K-821 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I1> .

<https://knobit.org/id/register/data-security#SE-355> a edu:Question ;
    rdfs:label "dsec-access-design I1: the confidentiality standard has no special-category class"@en ;
    dcterms:identifier "SE-355" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-910 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I1> .

<https://knobit.org/id/register/data-security#SE-356> a edu:Question ;
    rdfs:label "dsec-access-design I2: the agency row filter keyed on a value the agency loads"@en ;
    dcterms:identifier "SE-356" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-355 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I2> .

<https://knobit.org/id/register/data-security#SE-357> a edu:Question ;
    rdfs:label "dsec-access-design I2: a shared agency login with the go-live password"@en ;
    dcterms:identifier "SE-357" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-908 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I2> .

<https://knobit.org/id/register/data-security#SE-358> a edu:Question ;
    rdfs:label "dsec-access-design I2: an internal portal server open to the internet"@en ;
    dcterms:identifier "SE-358" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-906 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I2> .

<https://knobit.org/id/register/data-security#SE-359> a edu:Question ;
    rdfs:label "dsec-access-design I2: the agency file and its password in the same e-mail"@en ;
    dcterms:identifier "SE-359" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-905 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I2> .

<https://knobit.org/id/register/data-security#SE-360> a edu:Question ;
    rdfs:label "dsec-access-design I2: an outsourcing contract with no security terms"@en ;
    dcterms:identifier "SE-360" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-913 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I2> .

<https://knobit.org/id/register/data-security#SE-361> a edu:Question ;
    rdfs:label "dsec-access-design I3: collectors can change amounts loaded from core banking"@en ;
    dcterms:identifier "SE-361" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-904 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I3> .

<https://knobit.org/id/register/data-security#SE-362> a edu:Question ;
    rdfs:label "dsec-access-design I3: a CRUD matrix of jobs against the collections tables"@en ;
    dcterms:identifier "SE-362" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-912 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I3> .

<https://knobit.org/id/register/data-security#SE-363> a edu:Question ;
    rdfs:label "dsec-access-design I3: break-glass granted on an unverified phone call"@en ;
    dcterms:identifier "SE-363" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-354,
                knobit:S-909 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I3> .

<https://knobit.org/id/register/data-security#SE-364> a edu:Question ;
    rdfs:label "dsec-access-design I4: vulnerability, threat and risk told apart per finding"@en ;
    dcterms:identifier "SE-364" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-902 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I4> .

<https://knobit.org/id/register/data-security#SE-365> a edu:Question ;
    rdfs:label "dsec-access-design I4: requirement sources classified by kind and place of publication"@en ;
    dcterms:identifier "SE-365" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:G-1901 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I4> .

<https://knobit.org/id/register/data-security#SE-366> a edu:Question ;
    rdfs:label "dsec-access-design I4: open questions sent to the role that decides them"@en ;
    dcterms:identifier "SE-366" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-903 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/I4> .

<https://knobit.org/id/register/data-security#SE-367> a edu:Question ;
    rdfs:label "dsec-access-design Q1: agency controls tagged by type of data security"@en ;
    dcterms:identifier "SE-367" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-907 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/Q1> .

<https://knobit.org/id/register/data-security#SE-368> a edu:Question ;
    rdfs:label "dsec-access-design Q1: a tool named for each agency control"@en ;
    dcterms:identifier "SE-368" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-911 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/Q1> .

<https://knobit.org/id/register/data-security#SE-369> a edu:Question ;
    rdfs:label "dsec-access-design Q1: implementation, performance and risk metrics"@en ;
    dcterms:identifier "SE-369" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-914 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/Q1> .

<https://knobit.org/id/register/data-security#SE-370> a edu:Question ;
    rdfs:label "dsec-access-design Q2: why the bank secures the data - risk and business"@en ;
    dcterms:identifier "SE-370" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-901 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/Q2> .

<https://knobit.org/id/register/data-security#SE-371> a edu:Question ;
    rdfs:label "dsec-access-design Q2: least privilege with every duty still covered"@en ;
    dcterms:identifier "SE-371" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-333 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-access-design/Q2> .

<https://knobit.org/id/register/data-security#SE-401> a edu:Question ;
    rdfs:label "dsec-privacy C1: consent named for creditworthiness assessment"@en ;
    dcterms:identifier "SE-401" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-401 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/C1> .

<https://knobit.org/id/register/data-security#SE-402> a edu:Question ;
    rdfs:label "dsec-privacy C1: creditworthiness re-based on legal obligation and contract"@en ;
    dcterms:identifier "SE-402" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-431 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/C1> .

<https://knobit.org/id/register/data-security#SE-403> a edu:Question ;
    rdfs:label "dsec-privacy C2: marketing reuses the scoring results"@en ;
    dcterms:identifier "SE-403" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-408 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/C2> .

<https://knobit.org/id/register/data-security#SE-404> a edu:Question ;
    rdfs:label "dsec-privacy C2: the reuse put to a compatibility assessment or its own basis"@en ;
    dcterms:identifier "SE-404" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-432 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/C2> .

<https://knobit.org/id/register/data-security#SE-405> a edu:Question ;
    rdfs:label "dsec-privacy C3: automated scoring has no DPIA"@en ;
    dcterms:identifier "SE-405" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-406 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/C3> .

<https://knobit.org/id/register/data-security#SE-406> a edu:Question ;
    rdfs:label "dsec-privacy C3: no Art. 22 safeguards on the automated decline"@en ;
    dcterms:identifier "SE-406" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-409 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/C3> .

<https://knobit.org/id/register/data-security#SE-407> a edu:Question ;
    rdfs:label "dsec-privacy C3: a DPIA with safeguards proposed"@en ;
    dcterms:identifier "SE-407" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-433 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/C3> .

<https://knobit.org/id/register/data-security#SE-408> a edu:Question ;
    rdfs:label "dsec-privacy I1: marital history and social media profile collected"@en ;
    dcterms:identifier "SE-408" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-403 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/I1> .

<https://knobit.org/id/register/data-security#SE-409> a edu:Question ;
    rdfs:label "dsec-privacy I1: marketing data kept ten years"@en ;
    dcterms:identifier "SE-409" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-404 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/I1> .

<https://knobit.org/id/register/data-security#SE-410> a edu:Question ;
    rdfs:label "dsec-privacy I1: collections transfer with no safeguard"@en ;
    dcterms:identifier "SE-410" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-405 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/I1> .

<https://knobit.org/id/register/data-security#SE-411> a edu:Question ;
    rdfs:label "dsec-privacy I1: collections processor with no contract"@en ;
    dcterms:identifier "SE-411" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-407 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/I1> .

<https://knobit.org/id/register/data-security#SE-412> a edu:Question ;
    rdfs:label "dsec-privacy Q1: conclusions proposed for the DPO and counsel to sign off"@en ;
    dcterms:identifier "SE-412" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:G-532 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-privacy/Q1> .

<https://knobit.org/id/register/data-security#SE-450> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia C1: catch-all purpose improve customer experience reported"@en ;
    dcterms:identifier "SE-450" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-402 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/C1> .

<https://knobit.org/id/register/data-security#SE-451> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia C1: catch-all purpose split or suspended, payment data not carried over"@en ;
    dcterms:identifier "SE-451" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:O-1904 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/C1> .

<https://knobit.org/id/register/data-security#SE-452> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia C2: fraud monitoring record missing Art. 30(1) content reported"@en ;
    dcterms:identifier "SE-452" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-410 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/C2> .

<https://knobit.org/id/register/data-security#SE-453> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia C2: missing data subjects, recipients and security measures filled or raised"@en ;
    dcterms:identifier "SE-453" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-455 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/C2> .

<https://knobit.org/id/register/data-security#SE-454> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia C3: AML due diligence re-based from consent to legal obligation"@en ;
    dcterms:identifier "SE-454" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-401 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/C3> .

<https://knobit.org/id/register/data-security#SE-455> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia C3: payment execution re-based from legitimate interest to contract"@en ;
    dcterms:identifier "SE-455" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-401 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/C3> .

<https://knobit.org/id/register/data-security#SE-456> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia C3: newsletter consent and biometric explicit consent left alone"@en ;
    dcterms:identifier "SE-456" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-451 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/C3> .

<https://knobit.org/id/register/data-security#SE-457> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia C4: biometric onboarding screened as DPIA required"@en ;
    dcterms:identifier "SE-457" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-406 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/C4> .

<https://knobit.org/id/register/data-security#SE-458> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia C4: automatic rejection given Art. 22(3) safeguards"@en ;
    dcterms:identifier "SE-458" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-409 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/C4> .

<https://knobit.org/id/register/data-security#SE-459> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia C4: newsletter screened as no DPIA, existing DPIA kept"@en ;
    dcterms:identifier "SE-459" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-453 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/C4> .

<https://knobit.org/id/register/data-security#SE-460> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia I1: biometric vendor with no Art. 28 contract"@en ;
    dcterms:identifier "SE-460" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-407 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/I1> .

<https://knobit.org/id/register/data-security#SE-461> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia I1: vendor support access from India with no safeguard"@en ;
    dcterms:identifier "SE-461" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-405 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/I1> .

<https://knobit.org/id/register/data-security#SE-462> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia I1: Art. 46 safeguard with transfer impact assessment, or transfer suspended"@en ;
    dcterms:identifier "SE-462" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-454 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/I1> .

<https://knobit.org/id/register/data-security#SE-463> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia I1: Swiss transfer on adequacy left alone"@en ;
    dcterms:identifier "SE-463" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-454 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/I1> .

<https://knobit.org/id/register/data-security#SE-464> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia I2: indefinite AML retention replaced by the legal period"@en ;
    dcterms:identifier "SE-464" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-404 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/I2> .

<https://knobit.org/id/register/data-security#SE-465> a edu:Question ;
    rdfs:label "dsec-processing-records-dpia Q1: conclusions proposed for DPO and legal counsel sign-off"@en ;
    dcterms:identifier "SE-465" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:G-532 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-processing-records-dpia/Q1> .

<https://knobit.org/id/register/data-security#SE-501> a edu:Question ;
    rdfs:label "dsec-monitoring-audit C1: DBAs can truncate the audit table that records them"@en ;
    dcterms:identifier "SE-501" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-505 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-monitoring-audit/C1> .

<https://knobit.org/id/register/data-security#SE-502> a edu:Question ;
    rdfs:label "dsec-monitoring-audit C1: log integrity separated from the people logged"@en ;
    dcterms:identifier "SE-502" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-531 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-monitoring-audit/C1> .

<https://knobit.org/id/register/data-security#SE-503> a edu:Question ;
    rdfs:label "dsec-monitoring-audit C2: fourteen unconfirmed accounts left active"@en ;
    dcterms:identifier "SE-503" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-510 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-monitoring-audit/C2> .

<https://knobit.org/id/register/data-security#SE-504> a edu:Question ;
    rdfs:label "dsec-monitoring-audit C2: unconfirmed access revoked"@en ;
    dcterms:identifier "SE-504" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-532 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-monitoring-audit/C2> .

<https://knobit.org/id/register/data-security#SE-505> a edu:Question ;
    rdfs:label "dsec-monitoring-audit C3: the team lead recertifies their own access"@en ;
    dcterms:identifier "SE-505" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-502 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-monitoring-audit/C3> .

<https://knobit.org/id/register/data-security#SE-506> a edu:Question ;
    rdfs:label "dsec-monitoring-audit C3: an independent reviewer assigned"@en ;
    dcterms:identifier "SE-506" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-533 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-monitoring-audit/C3> .

<https://knobit.org/id/register/data-security#SE-507> a edu:Question ;
    rdfs:label "dsec-monitoring-audit I1: break-glass sessions not logged"@en ;
    dcterms:identifier "SE-507" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-501 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-monitoring-audit/I1> .

<https://knobit.org/id/register/data-security#SE-508> a edu:Question ;
    rdfs:label "dsec-monitoring-audit I1: service account reads of PANs not logged"@en ;
    dcterms:identifier "SE-508" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-509 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-monitoring-audit/I1> .

<https://knobit.org/id/register/data-security#SE-509> a edu:Question ;
    rdfs:label "dsec-monitoring-audit I1: audit logs kept 90 days"@en ;
    dcterms:identifier "SE-509" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-504 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-monitoring-audit/I1> .

<https://knobit.org/id/register/data-security#SE-510> a edu:Question ;
    rdfs:label "dsec-monitoring-audit I1: an alert with no responder"@en ;
    dcterms:identifier "SE-510" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-506 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-monitoring-audit/I1> .

<https://knobit.org/id/register/data-security#SE-511> a edu:Question ;
    rdfs:label "dsec-monitoring-audit Q1: retention cited to PCI DSS Req. 10.5.1, no invented figures"@en ;
    dcterms:identifier "SE-511" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-553 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-monitoring-audit/Q1> .

<https://knobit.org/id/register/data-security#SE-550> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification C1: the restricted-read log with no reviewer and no review on record"@en ;
    dcterms:identifier "SE-550" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-503 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/C1> .

<https://knobit.org/id/register/data-security#SE-551> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification C1: a log with a reviewer but no frequency, reviewed once ad hoc"@en ;
    dcterms:identifier "SE-551" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-503 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/C1> .

<https://knobit.org/id/register/data-security#SE-552> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification C1: unreviewed logs given a named reviewer and a stated frequency"@en ;
    dcterms:identifier "SE-552" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-503 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/C1> .

<https://knobit.org/id/register/data-security#SE-553> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification C2: quarterly DBA recertification last run two quarters ago"@en ;
    dcterms:identifier "SE-553" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-507 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/C2> .

<https://knobit.org/id/register/data-security#SE-554> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification C2: annual recertification of unmasked readers overdue"@en ;
    dcterms:identifier "SE-554" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-507 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/C2> .

<https://knobit.org/id/register/data-security#SE-555> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification C2: overdue campaigns scheduled to run now, not at the next slot"@en ;
    dcterms:identifier "SE-555" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-507 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/C2> .

<https://knobit.org/id/register/data-security#SE-556> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification C3: break-glass role in no recertification campaign"@en ;
    dcterms:identifier "SE-556" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-508 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/C3> .

<https://knobit.org/id/register/data-security#SE-557> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification C3: service account reading restricted data in no campaign"@en ;
    dcterms:identifier "SE-557" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-508 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/C3> .

<https://knobit.org/id/register/data-security#SE-558> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification C3: uncovered roles put into a campaign with an independent reviewer"@en ;
    dcterms:identifier "SE-558" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-508,
                knobit:S-533 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/C3> .

<https://knobit.org/id/register/data-security#SE-559> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification I1: semi-annual campaign not yet due left alone"@en ;
    dcterms:identifier "SE-559" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-507 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/I1> .

<https://knobit.org/id/register/data-security#SE-560> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification I1: retired role with no holders not flagged as outside recertification"@en ;
    dcterms:identifier "SE-560" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-508 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/I1> .

<https://knobit.org/id/register/data-security#SE-561> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification I1: log with weekly reviews on record left alone"@en ;
    dcterms:identifier "SE-561" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-503 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/I1> .

<https://knobit.org/id/register/data-security#SE-562> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification I2: a log entry records who, what, when, from where and the result"@en ;
    dcterms:identifier "SE-562" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-551 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/I2> .

<https://knobit.org/id/register/data-security#SE-563> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification I2: logs protected from the people they record"@en ;
    dcterms:identifier "SE-563" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-551 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/I2> .

<https://knobit.org/id/register/data-security#SE-564> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification I2: every log reviewed by a named reviewer at a stated frequency"@en ;
    dcterms:identifier "SE-564" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-551 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/I2> .

<https://knobit.org/id/register/data-security#SE-565> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification I2: monitoring rules with a threshold and a responder"@en ;
    dcterms:identifier "SE-565" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-551 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/I2> .

<https://knobit.org/id/register/data-security#SE-566> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification I3: recertification is periodic, on a stated frequency, run on time"@en ;
    dcterms:identifier "SE-566" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-552 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/I3> .

<https://knobit.org/id/register/data-security#SE-567> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification I3: recertified by someone who does not hold the access"@en ;
    dcterms:identifier "SE-567" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-552 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/I3> .

<https://knobit.org/id/register/data-security#SE-568> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification I3: unconfirmed or rejected access revoked with evidence"@en ;
    dcterms:identifier "SE-568" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-552 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/I3> .

<https://knobit.org/id/register/data-security#SE-569> a edu:Question ;
    rdfs:label "dsec-log-integrity-recertification I3: every privileged and restricted-data role in scope, service and emergency accounts included"@en ;
    dcterms:identifier "SE-569" ;
    edu:solvableWith [ a edu:KnobitSet ;
            edu:memberKnobit knobit:S-552 ] ;
    schema:isPartOf register:data-security,
        <https://knobit.org/id/task/dsec-log-integrity-recertification/I3> .

<https://knobit.org/id/register/data-security#SV-1> a edu:LearningOutcome ;
    rdfs:label "Identify data security requirements"@en ;
    dcterms:description "Business and regulatory requirements for protecting data."@en ;
    dcterms:identifier "SV-1" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.1"@en ;
    skos:notation "2.1" ;
    edu:includesKnobit knobit:G-1901,
        knobit:S-131,
        knobit:S-132,
        knobit:S-151,
        knobit:S-152 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-10> a edu:LearningOutcome ;
    rdfs:label "Vulnerability, threat, risk, risk classifications; assess current risks"@en ;
    dcterms:description "Security risk."@en ;
    dcterms:identifier "SV-10" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.1-1.3.4, 2.4"@en ;
    skos:notation "1.3.1-1.3.4, 2.4" ;
    edu:includesKnobit knobit:S-902 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-11> a edu:LearningOutcome ;
    rdfs:label "Data security organisation"@en ;
    dcterms:description "Who does data security."@en ;
    dcterms:identifier "SV-11" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.5"@en ;
    skos:notation "1.3.5" ;
    edu:includesKnobit knobit:S-903 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-12> a edu:LearningOutcome ;
    rdfs:label "Data integrity"@en ;
    dcterms:description "Integrity as a security goal."@en ;
    dcterms:identifier "SV-12" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.7"@en ;
    skos:notation "1.3.7" ;
    edu:includesKnobit knobit:S-904 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-13> a edu:LearningOutcome ;
    rdfs:label "Encryption"@en ;
    dcterms:description "Hash, symmetric and public-key encryption."@en ;
    dcterms:identifier "SV-13" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.8"@en ;
    skos:notation "1.3.8" ;
    edu:includesKnobit knobit:S-905 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-14> a edu:LearningOutcome ;
    rdfs:label "Network security terms"@en ;
    dcterms:description "Network and device security vocabulary."@en ;
    dcterms:identifier "SV-14" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.10"@en ;
    skos:notation "1.3.10" ;
    edu:includesKnobit knobit:S-906 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-15> a edu:LearningOutcome ;
    rdfs:label "Types of data security"@en ;
    dcterms:description "Facility, device, credential, document security."@en ;
    dcterms:identifier "SV-15" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.11"@en ;
    skos:notation "1.3.11" ;
    edu:includesKnobit knobit:S-907 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-16> a edu:LearningOutcome ;
    rdfs:label "System security risks"@en ;
    dcterms:description "Privilege abuse, injection, default passwords, backup abuse."@en ;
    dcterms:identifier "SV-16" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.13"@en ;
    skos:notation "1.3.13" ;
    edu:includesKnobit knobit:S-908 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-17> a edu:LearningOutcome ;
    rdfs:label "Hacking, social threats, malware"@en ;
    dcterms:description "Attack types."@en ;
    dcterms:identifier "SV-17" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.14-1.3.16"@en ;
    skos:notation "1.3.14-1.3.16" ;
    edu:includesKnobit knobit:S-909 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-18> a edu:LearningOutcome ;
    rdfs:label "Define data security policy and standards"@en ;
    dcterms:description "Policy and the standards it rests on."@en ;
    dcterms:identifier "SV-18" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.2-2.3"@en ;
    skos:notation "2.2-2.3" ;
    edu:includesKnobit knobit:S-910 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-19> a edu:LearningOutcome ;
    rdfs:label "Tools"@en ;
    dcterms:description "Security tools."@en ;
    dcterms:identifier "SV-19" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 3"@en ;
    skos:notation "3" ;
    edu:includesKnobit knobit:S-911 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-2> a edu:LearningOutcome ;
    rdfs:label "Types of data security restrictions"@en ;
    dcterms:description "Confidential and regulated data: personal data, financial data, PCI DSS cardholder data."@en ;
    dcterms:identifier "SV-2" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.12"@en ;
    skos:notation "1.3.12" ;
    edu:includesKnobit knobit:S-153,
        knobit:S-154,
        knobit:S-155,
        knobit:S-254 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-20> a edu:LearningOutcome ;
    rdfs:label "Techniques"@en ;
    dcterms:description "Security techniques."@en ;
    dcterms:identifier "SV-20" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 4"@en ;
    skos:notation "4" ;
    edu:includesKnobit knobit:S-912 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-21> a edu:LearningOutcome ;
    rdfs:label "Implementation guidelines"@en ;
    dcterms:description "Readiness, culture, outsourcing, cloud."@en ;
    dcterms:identifier "SV-21" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 5"@en ;
    skos:notation "5" ;
    edu:includesKnobit knobit:S-913 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-22> a edu:LearningOutcome ;
    rdfs:label "Data security governance: metrics"@en ;
    dcterms:description "Measuring data security."@en ;
    dcterms:identifier "SV-22" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 6"@en ;
    skos:notation "6" ;
    edu:includesKnobit knobit:S-914 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-3> a edu:LearningOutcome ;
    rdfs:label "Define data security standards: confidentiality levels and regulatory categories"@en ;
    dcterms:description "Classification of data by confidentiality and by the regulations that apply."@en ;
    dcterms:identifier "SV-3" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.3"@en ;
    skos:notation "2.3" ;
    edu:includesKnobit knobit:S-231,
        knobit:S-251,
        knobit:S-252 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-4> a edu:LearningOutcome ;
    rdfs:label "Obfuscation or masking; de-identification"@en ;
    dcterms:description "Making data unreadable or non-identifying."@en ;
    dcterms:identifier "SV-4" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.9"@en ;
    skos:notation "1.3.9" ;
    edu:includesKnobit knobit:S-253 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-5> a edu:LearningOutcome ;
    rdfs:label "Data security processes: access, authentication, authorisation, entitlement"@en ;
    dcterms:description "The four A's and entitlement management."@en ;
    dcterms:identifier "SV-5" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.6"@en ;
    skos:notation "1.3.6" ;
    edu:includesKnobit knobit:G-255,
        knobit:S-331,
        knobit:S-333,
        knobit:S-351,
        knobit:S-355 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-6> a edu:LearningOutcome ;
    rdfs:label "Implement controls: manage users, roles and permissions; control access to restricted data"@en ;
    dcterms:description "Role-based access, views, masking and privileged access."@en ;
    dcterms:identifier "SV-6" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.5"@en ;
    skos:notation "2.5" ;
    edu:includesKnobit knobit:S-332,
        knobit:S-353,
        knobit:S-354 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-7> a edu:LearningOutcome ;
    rdfs:label "Regulated data: personal data and privacy obligations"@en ;
    dcterms:description "Personal data under GDPR and the obligations it carries."@en ;
    dcterms:identifier "SV-7" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.3.12"@en ;
    skos:notation "1.3.12" ;
    edu:includesKnobit knobit:G-532,
        knobit:O-1904,
        knobit:S-431,
        knobit:S-432,
        knobit:S-433,
        knobit:S-451,
        knobit:S-453,
        knobit:S-454,
        knobit:S-455 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-8> a edu:LearningOutcome ;
    rdfs:label "Monitor user authentication and access behaviour; manage security policy compliance (auditing)"@en ;
    dcterms:description "Logging, monitoring, access reviews and audits."@en ;
    dcterms:identifier "SV-8" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 2.5"@en ;
    skos:notation "2.5" ;
    edu:includesKnobit knobit:S-531,
        knobit:S-532,
        knobit:S-533,
        knobit:S-551,
        knobit:S-552,
        knobit:S-553 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

<https://knobit.org/id/register/data-security#SV-9> a edu:LearningOutcome ;
    rdfs:label "Business drivers, goals and principles"@en ;
    dcterms:description "Why data security matters to the bank."@en ;
    dcterms:identifier "SV-9" ;
    dcterms:source "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security, 1.1-1.2"@en ;
    skos:notation "1.1-1.2" ;
    edu:includesKnobit knobit:S-901 ;
    schema:isPartOf <https://knobit.org/id/register/data-security#REF-1> .

knobit:G-255 rdfs:label "Explains segregation of duties"@en .

knobit:G-403 rdfs:label "Recognises a control with no evidence"@en,
        "Recognises a security control with no evidence"@en .

knobit:K-821 rdfs:label "Recognises a restricted column without access design"@en .

knobit:K12-57100 rdfs:label "Distinguishes the kinds of legal texts and where to find them"@en,
        "Eristab õigustekstide liike ja leidmiskohti"@et .

knobit:K12-69062 rdfs:label "Explains how database tables and relationships are structured"@en,
        "Selgitab andmebaasi tabelite ja seoste ülesehitust"@et .

knobit:K12-70093 rdfs:label "Distinguishes personal data from special categories of personal data"@en,
        "Eristab isikuandmeid ja eriliigilisi isikuandmeid"@et .

knobit:K12-70095 rdfs:label "Explains the legal bases for processing personal data"@en,
        "Selgitab isikuandmete töötlemise õiguslikke aluseid"@et .

knobit:S-101 rdfs:label "Recognises a requirement with no control"@en .

knobit:S-102 rdfs:label "Recognises a regulation cited for data it does not cover"@en .

knobit:S-103 rdfs:label "Recognises a requirement with no data scope"@en .

knobit:S-105 rdfs:label "Recognises a requirement or control with no owner"@en .

knobit:S-108 rdfs:label "Recognises regulated data outside its requirement's scope"@en .

knobit:S-109 rdfs:label "Recognises a control unable to satisfy its requirement"@en .

knobit:S-110 rdfs:label "Recognises conflicting requirements with no precedence"@en .

knobit:S-152 rdfs:label "Explains which regulations cover which bank data"@en .

knobit:S-153 rdfs:label "Explains PCI DSS scope"@en .

knobit:S-154 rdfs:label "Explains PCI DSS requirements on stored card data"@en .

knobit:S-201 rdfs:label "Recognises a card number not classified as cardholder data"@en .

knobit:S-206 rdfs:label "Recognises a level below its category's minimum"@en .

knobit:S-209 rdfs:label "Recognises a derivation rule leaving data identifying"@en .

knobit:S-210 rdfs:label "Recognises a classification disagreeing with the physical model"@en .

knobit:S-211 rdfs:label "Recognises a classification level with no handling rules"@en .

knobit:S-251 rdfs:label "Explains a data classification scheme"@en .

knobit:S-252 rdfs:label "Explains classification of derived data"@en .

knobit:S-253 rdfs:label "Explains anonymisation against pseudonymisation"@en .

knobit:S-254 rdfs:label "Explains special categories of personal data"@en .

knobit:S-301 rdfs:label "Recognises a role granting more than its jobs require"@en .

knobit:S-302 rdfs:label "Recognises a toxic combination in one role"@en .

knobit:S-303 rdfs:label "Recognises a toxic combination across a job's roles"@en .

knobit:S-304 rdfs:label "Recognises masking a join can undo"@en .

knobit:S-305 rdfs:label "Recognises row security on an updatable column"@en .

knobit:S-306 rdfs:label "Recognises a privileged role with no logging"@en .

knobit:S-307 rdfs:label "Recognises break-glass access with no expiry"@en .

knobit:S-308 rdfs:label "Recognises an access role with no owner"@en .

knobit:S-309 rdfs:label "Recognises an administrator reading restricted data"@en .

knobit:S-310 rdfs:label "Recognises masking applied to one copy only"@en .

knobit:S-311 rdfs:label "Recognises a shared privileged account"@en .

knobit:S-351 rdfs:label "Explains least-privilege access design"@en .

knobit:S-402 rdfs:label "Recognises a purpose wide enough to allow anything"@en .

knobit:S-403 rdfs:label "Recognises data beyond what the purpose requires"@en,
        "Recognises shared elements beyond the purpose"@en .

knobit:S-408 rdfs:label "Recognises further use with no compatibility assessment"@en .

knobit:S-410 rdfs:label "Recognises an incomplete record of processing"@en .

knobit:S-501 rdfs:label "Recognises privileged access not logged"@en .

knobit:S-502 rdfs:label "Recognises an access recertification by the holder"@en .

knobit:S-504 rdfs:label "Recognises log retention shorter than required"@en .

knobit:S-505 rdfs:label "Recognises an audit trail administrators can edit"@en,
        "Recognises logs the recorded people can alter"@en .

knobit:S-506 rdfs:label "Recognises a monitoring rule with no threshold or response"@en .

knobit:S-509 rdfs:label "Recognises restricted reads not logged"@en .

knobit:S-510 rdfs:label "Recognises rejected access still active"@en .

<https://knobit.org/id/task/dsec-access-control/Q1> rdfs:label "Q1 (1 points)"@en .

<https://knobit.org/id/task/dsec-monitoring-audit/Q1> rdfs:label "Q1 (1 points)"@en .

<https://knobit.org/id/task/dsec-privacy/Q1> rdfs:label "Q1 (1 points)"@en .

<https://knobit.org/id/task/dsec-processing-records-dpia/I2> rdfs:label "I2 (1 points)"@en .

<https://knobit.org/id/task/dsec-processing-records-dpia/Q1> rdfs:label "Q1 (1 points)"@en .

<https://knobit.org/id/task/dsec-regulatory-requirements/I2> rdfs:label "I2 (1 points)"@en .

knobit:O-1904 rdfs:label "Explains purpose limitation, minimisation and storage limitation"@en .

knobit:S-104 rdfs:label "Recognises a requirement cited to the wrong article or version"@en .

knobit:S-151 rdfs:label "Explains the regulatory requirements register"@en .

knobit:S-155 rdfs:label "Explains the limits of erasure against legal retention"@en .

knobit:S-203 rdfs:label "Recognises an aggregate still identifying a person"@en .

knobit:S-204 rdfs:label "Recognises an unclassified column"@en .

knobit:S-205 rdfs:label "Recognises stored sensitive authentication data"@en .

knobit:S-207 rdfs:label "Recognises pseudonymised data treated as anonymous"@en .

knobit:S-231 rdfs:label "Propagates classification to derived columns"@en .

knobit:S-332 rdfs:label "Closes the clear-text paths around a masked column"@en .

knobit:S-353 rdfs:label "Explains data masking and its limits"@en .

knobit:S-354 rdfs:label "Explains privileged and emergency access"@en .

knobit:S-355 rdfs:label "Explains row-level security"@en .

knobit:S-404 rdfs:label "Recognises retention beyond every basis"@en,
        "Recognises retention longer than the purpose"@en,
        "Recognises sharing retention missing or beyond the purpose"@en .

knobit:S-405 rdfs:label "Recognises a third-country transfer with no safeguard"@en .

knobit:S-406 rdfs:label "Recognises high-risk processing with no DPIA"@en .

knobit:S-407 rdfs:label "Recognises a processor with no contract"@en .

knobit:S-409 rdfs:label "Recognises an automated decision with no Art. 22 safeguards"@en .

knobit:S-431 rdfs:label "Re-bases a processing purpose on the lawful basis the bank relies on"@en .

knobit:S-432 rdfs:label "Raises a further use of data for a compatibility assessment"@en .

knobit:S-433 rdfs:label "Proposes a DPIA with Art. 22 safeguards for automated decisions"@en .

knobit:S-451 rdfs:label "Explains the lawful bases for processing"@en .

knobit:S-453 rdfs:label "Explains DPIA triggers and automated decisions"@en .

knobit:S-455 rdfs:label "Explains the record of processing activities"@en .

knobit:S-531 rdfs:label "Separates log integrity from the people logged"@en .

knobit:S-532 rdfs:label "Revokes access a review did not confirm"@en .

knobit:S-553 rdfs:label "Explains PCI DSS audit log retention"@en .

knobit:S-901 rdfs:label "Explains the drivers and goals of data security"@en .

knobit:S-902 rdfs:label "Explains vulnerability, threat and risk"@en .

knobit:S-903 rdfs:label "Explains the data security organisation"@en .

knobit:S-904 rdfs:label "Explains data integrity as a security concern"@en .

knobit:S-906 rdfs:label "Explains network and device security terms"@en .

knobit:S-907 rdfs:label "Explains the types of data security"@en .

knobit:S-908 rdfs:label "Explains system security risks"@en .

knobit:S-909 rdfs:label "Explains hacking, social threats and malware"@en .

knobit:S-910 rdfs:label "Explains data security policy and standards"@en .

knobit:S-911 rdfs:label "Explains data security tools"@en .

knobit:S-912 rdfs:label "Explains data security techniques"@en .

knobit:S-913 rdfs:label "Explains data security implementation"@en .

knobit:S-914 rdfs:label "Explains data security metrics"@en .

<https://knobit.org/id/task/dsec-access-control/C1> rdfs:label "C1 (2 points)"@en .

<https://knobit.org/id/task/dsec-access-control/C2> rdfs:label "C2 (2 points)"@en .

<https://knobit.org/id/task/dsec-access-design/C1> rdfs:label "C1 (2 points)"@en .

<https://knobit.org/id/task/dsec-access-design/C2> rdfs:label "C2 (2 points)"@en .

<https://knobit.org/id/task/dsec-access-design/I1> rdfs:label "I1 (1.5 points)"@en .

<https://knobit.org/id/task/dsec-access-design/Q2> rdfs:label "Q2 (1 points)"@en .

<https://knobit.org/id/task/dsec-classification/C1> rdfs:label "C1 (2 points)"@en .

<https://knobit.org/id/task/dsec-classification/C2> rdfs:label "C2 (2 points)"@en .

<https://knobit.org/id/task/dsec-monitoring-audit/C1> rdfs:label "C1 (2 points)"@en .

<https://knobit.org/id/task/dsec-monitoring-audit/C2> rdfs:label "C2 (2 points)"@en .

<https://knobit.org/id/task/dsec-monitoring-audit/C3> rdfs:label "C3 (2 points)"@en .

<https://knobit.org/id/task/dsec-privacy/C1> rdfs:label "C1 (2 points)"@en .

<https://knobit.org/id/task/dsec-privacy/C2> rdfs:label "C2 (2 points)"@en .

<https://knobit.org/id/task/dsec-processing-records-dpia/C1> rdfs:label "C1 (2 points)"@en .

<https://knobit.org/id/task/dsec-processing-records-dpia/C2> rdfs:label "C2 (2 points)"@en .

<https://knobit.org/id/task/dsec-regulatory-requirements/C2> rdfs:label "C2 (2 points)"@en .

<https://knobit.org/id/task/dsec-requirements-classification/C2> rdfs:label "C2 (2 points)"@en .

<https://knobit.org/id/task/dsec-requirements-classification/C3> rdfs:label "C3 (2 points)"@en .

<https://knobit.org/id/task/dsec-requirements-classification/I1> rdfs:label "I1 (2 points)"@en .

<https://knobit.org/id/task/dsec-requirements-classification/I2> rdfs:label "I2 (1 points)"@en .

<https://knobit.org/id/task/dsec-requirements-classification/I3> rdfs:label "I3 (2 points)"@en .

<https://knobit.org/id/task/dsec-requirements-classification/I4> rdfs:label "I4 (1 points)"@en .

knobit:G-1901 rdfs:label "Explains the kinds of rules binding an organisation's data and where they are published"@en .

knobit:G-532 rdfs:label "Raises a decision for its owner instead of taking it"@en .

knobit:S-107 rdfs:label "Recognises a regulation in force with no requirements"@en .

knobit:S-132 rdfs:label "Raises a requirement conflict for the owner of the interpretation"@en .

knobit:S-202 rdfs:label "Recognises a derived column less sensitive than its source"@en .

knobit:S-208 rdfs:label "Recognises unrecognised special category data"@en .

knobit:S-331 rdfs:label "Splits a toxic combination into separate roles"@en .

knobit:S-333 rdfs:label "Removes excess entitlements while keeping every duty covered"@en .

knobit:S-401 rdfs:label "Recognises a wrong or missing lawful basis"@en .

knobit:S-454 rdfs:label "Explains processors and international transfers"@en .

knobit:S-533 rdfs:label "Assigns an independent reviewer to an access recertification"@en .

knobit:S-905 rdfs:label "Explains encryption types"@en .

<https://knobit.org/id/task/dsec-access-control/I2> rdfs:label "I2 (1.5 points)"@en .

<https://knobit.org/id/task/dsec-access-design/I3> rdfs:label "I3 (1.5 points)"@en .

<https://knobit.org/id/task/dsec-access-design/I4> rdfs:label "I4 (1.5 points)"@en .

<https://knobit.org/id/task/dsec-access-design/Q1> rdfs:label "Q1 (1.5 points)"@en .

<https://knobit.org/id/task/dsec-log-integrity-recertification/C1> rdfs:label "C1 (3 points)"@en .

<https://knobit.org/id/task/dsec-log-integrity-recertification/C2> rdfs:label "C2 (3 points)"@en .

<https://knobit.org/id/task/dsec-log-integrity-recertification/C3> rdfs:label "C3 (3 points)"@en .

<https://knobit.org/id/task/dsec-log-integrity-recertification/I1> rdfs:label "I1 (1.5 points)"@en .

<https://knobit.org/id/task/dsec-privacy/C3> rdfs:label "C3 (3 points)"@en .

<https://knobit.org/id/task/dsec-processing-records-dpia/C3> rdfs:label "C3 (3 points)"@en .

<https://knobit.org/id/task/dsec-processing-records-dpia/C4> rdfs:label "C4 (3 points)"@en .

<https://knobit.org/id/task/dsec-regulatory-requirements/C1> rdfs:label "C1 (3 points)"@en .

<https://knobit.org/id/task/dsec-requirements-classification/C1> rdfs:label "C1 (3 points)"@en .

knobit:S-131 rdfs:label "Traces the scope consequence of a regulated data copy"@en .

knobit:S-503 rdfs:label "Recognises a log nobody reviews"@en .

knobit:S-507 rdfs:label "Recognises an overdue recertification"@en .

knobit:S-508 rdfs:label "Recognises privileged access outside recertification"@en .

<https://knobit.org/id/task/dsec-access-control/I1> rdfs:label "I1 (2 points)"@en .

<https://knobit.org/id/task/dsec-classification/I1> rdfs:label "I1 (2 points)"@en .

<https://knobit.org/id/task/dsec-classification/I2> rdfs:label "I2 (2 points)"@en .

<https://knobit.org/id/task/dsec-log-integrity-recertification/I2> rdfs:label "I2 (2 points)"@en .

<https://knobit.org/id/task/dsec-log-integrity-recertification/I3> rdfs:label "I3 (2 points)"@en .

<https://knobit.org/id/task/dsec-monitoring-audit/I1> rdfs:label "I1 (2 points)"@en .

<https://knobit.org/id/task/dsec-privacy/I1> rdfs:label "I1 (2 points)"@en .

<https://knobit.org/id/task/dsec-processing-records-dpia/I1> rdfs:label "I1 (2 points)"@en .

knobit:S-551 rdfs:label "Explains logging and monitoring of data access"@en .

knobit:S-552 rdfs:label "Explains access recertification"@en .

<https://knobit.org/id/task/dsec-access-design/I2> rdfs:label "I2 (2.5 points)"@en .

<https://knobit.org/id/task/dsec-regulatory-requirements/I1> rdfs:label "I1 (3 points)"@en .

edu:LearningOutcome rdfs:label "Learning outcome"@en,
        "Õpiväljund"@et .

<https://knobit.org/id/register/data-security#REF-1> a schema:CreativeWork ;
    dcterms:identifier "REF-1" ;
    dcterms:publisher "DAMA International" ;
    dcterms:title "DAMA-DMBOK: Data Management Body of Knowledge, 2nd edition (revised), chapter 7: Data Security"@en ;
    skos:note "target level: CDMP Associate: the data security questions of the Data Management Fundamentals exam (DAMA International); CDMP has no data security specialist exam"@en ;
    schema:version "2nd edition, revised (DMBOK2/RE)" .

edu:KnobitSet rdfs:label "Knobit set"@en,
        "Knobitite kogum"@et .

edu:Question rdfs:label "Question"@en,
        "Küsimus"@et .

register:data-security a schema:Dataset ;
    dcterms:description "Recognising and repairing defects in data security and privacy deliverables - requirements, classification, access control, privacy records and monitoring - and following sensitive data to everywhere it has been copied: the competence the data-security skill applies, and that skill-tests assesses."@en ;
    dcterms:identifier "SCOPE-1" ;
    dcterms:license <https://creativecommons.org/licenses/by/4.0/> ;
    dcterms:rights "Copyright 2026 Peep Küngas. Licensed under CC BY 4.0." ;
    dcterms:title "Data security and privacy (DAMA-DMBOK2)"@en ;
    owl:sameAs <https://bitbucket.org/reffa/ontology/skills/data-security> ;
    skos:note "audience: Data security and privacy officers, data owners, and AI models assessed by skill-tests"@en,
        "domain: Data management, data security (DAMA-DMBOK2 chapter 7)"@en,
        "level: CDMP Associate: the data security questions of the Data Management Fundamentals exam (DAMA International); CDMP has no data security specialist exam"@en ;
    edu:conformsToProfile <https://oppekava.edu.ee/a/Knobitite_kirjeldamise_ja_seostamise_reeglid#LCG-KNOBIT-0.1> ;
    edu:graphRelevance <https://knobit.org/def/graphRelevance/learnerState>,
        <https://knobit.org/def/graphRelevance/outcomeContent>,
        <https://knobit.org/def/graphRelevance/taskSelection> ;
    schema:license <https://creativecommons.org/licenses/by/4.0/> .