28. Data Security Frameworks

Question 1

Data Security Frameworks

Deciding which controls we want to use, apply and how we deploy them

Answer 1

1. Baselines
2. Scoping
3. Tailoring

Question 2

Data Security Frameworks

Different controls for different data

Answer 2

1. Data at rest
2. Data in transit

Question 3

Data Security Frameworks

Scoping

Answer 3

Determin which portion of a standard we want to deploy

• Take portions of the standard we want to apply
• determine the scope and what is out of scope

Question 4

Data Security Frameworks

Tailoring

Answer 4

Customize the standard to our organisation and needs

• We may apply the standard but choose to use a stronger encryption

Question 5

Data Security Frameworks

Certification

Answer 5

System and security measured protecting it meet the security requirements set out by the owner or by law

• If owner refuses certification, you need to work with data owner to address concerns

Question 6

Data Security Frameworks

Accreditation

Answer 6

Data owner accepts certification and residual risk
Required before system put into production