5.8 Carry out data security and privacy practices

Question 1

Data destruction and media sanitization

Answer 1

A

Question 2

Degaussing

Answer 2

exposing the disk to a powerful electromagnet disrupts the magnetic pattern that stores the data on the disk surface

Question 3

Purging

Answer 3

removing the confidential information but leaving the media intact for reuse

Question 4

Data sensitivity labeling and handling

Answer 4

The process of managing information over its lifecycle (from creation to destruction)

Question 5

Confidential

Answer 5

The information is highly sensitive, for viewing only by approved persons within the organization (and possibly by trusted third parties under NDA).

Question 6

Private

Answer 6

Viewing is restricted to the owner organization or to third parties under an NDA.

Question 7

Public

Answer 7

There are no restrictions on viewing the document.

Question 8

PII

Answer 8

(personally identifiable information) Data that can be used to identify or contact an individual (or in the case of identity theft, to impersonate them).

Question 9

PHI

Answer 9

(protected health information) Information that identifies someone as the subject of medical and insurance records, plus associated hospital and laboratory test results.

Question 10

Data Owner

Answer 10

A senior (executive) role with ultimate responsibility for maintaining the confidentiality, integrity, and availability of the information asset.

Question 11

Data Steward/custodian

Answer 11

This role is primarily responsible for data quality. This involves tasks such as ensuring data is labelled and identified with appropriate metadata and that data is collected and stored in a format and with values that comply with applicable laws and regulations.

Question 12

Privacy officer

Answer 12

This role is responsible for oversight of any personally identifiable information (PII) assets managed by the company. The privacy officer ensures that the processing and disclosure of PII complies with legal and regulatory frameworks.

Question 13

Data retention

Answer 13

The process of an organization maintaining the existence of and control over certain data in order to comply with business policies and/or applicable laws and regulations.