@prefix dcterms: <http://purl.org/dc/terms/> .
@prefix edu: <https://knobit.org/def/> .
@prefix owl: <http://www.w3.org/2002/07/owl#> .
@prefix rdfs: <http://www.w3.org/2000/01/rdf-schema#> .
@prefix schema: <https://schema.org/> .
@prefix xsd: <http://www.w3.org/2001/XMLSchema#> .

<https://knobit.org/id/task/dsec-classification/I2> a edu:Question ;
    rdfs:label "I2 (2 points)"@en ;
    dcterms:license <https://creativecommons.org/licenses/by/4.0/> ;
    owl:sameAs <https://bitbucket.org/reffa/ontology/id/task/dsec-classification/I2> ;
    schema:hasPart <https://knobit.org/id/register/data-security#SE-209>,
        <https://knobit.org/id/register/data-security#SE-210>,
        <https://knobit.org/id/register/data-security#SE-211>,
        <https://knobit.org/id/register/data-security#SE-212> ;
    schema:identifier "I2" ;
    schema:position 4 ;
    schema:text "0.5 each. (a) Derivation rule DR-002 'first 6 and last 6 digits' does not truncate a 16-digit PAN enough: PCI DSS allows at most first 6 and last 4. (b) customer_profile.birth_date, derived from the personal code, is internal: it inherits restricted or confidential personal unless a rule allows less. (c) account.iban is confidential here and internal in the physical model: one level, the disagreement raised with the data owner. (d) Level restricted has no handling rules: rules proposed."@en .

edu:Question rdfs:label "Question"@en,
        "Küsimus"@et .

<https://knobit.org/id/register/data-security#SE-209> rdfs:label "dsec-classification I2: first six and last six is not a truncation"@en .

<https://knobit.org/id/register/data-security#SE-210> rdfs:label "dsec-classification I2: birth date below its source"@en .

<https://knobit.org/id/register/data-security#SE-211> rdfs:label "dsec-classification I2: IBAN classified differently in the physical model"@en .

<https://knobit.org/id/register/data-security#SE-212> rdfs:label "dsec-classification I2: restricted has no handling rules"@en .