Objectives 5.5 - Privacy and Sensitive Data Concepts Flashcards

1
Q

What are 4 examples of organizational consequences of data breaches?

A

Reputation damage, Identify theft, fines, IP (intellectual property) theft

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What are some potential consequences of reputation damage due to data breaches?

A
  1. Opinion of organization becomes negative
  2. Can have an impact on products and services
  3. Can impact stock prices
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What are some potential consequences of identity theft due to data breaches?

A
  1. Company/customer information may become public
  2. May require public disclosure
  3. Credit monitoring costs
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are some potential consequences of fines due to data breaches?

A
  1. Lawsuit settlements that could cripple the company financially
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What are some potential consequences of IP theft due to data breaches?

A
  1. Stealing company secrets

2. Can put a company OUT OF BUSINESS

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are important takes regarding public notification of breaches?

A
  1. Refer to the security breach laws. Check with your state or country for guidance
  2. May allow delays for criminal investigations
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What are some traits of a proprietary data classification?

A
  1. Data that is the property of an organization
  2. May also include trade secrets
  3. Often data unique to an organization
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are some traits of a PII (Personally Identifiable Info) data classification?

A
  1. Data that can be used to identify an individual

2. Can be Name, Date of Birth, Mother’s maiden name, biometric info, etc.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What are some traits of a PHI (Personal Health Info) data classification?

A
  1. Health information associated with an individual

2. Health status, health care record

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What are some traits of a public data classification?

A
  1. No restrictions. It is public knowledge
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are some traits of a Private/Classified/Restricted/Internal Use Only data classification?

A
  1. Restricted access, may require an NDA
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are some traits of a sensitive data classification?

A
  1. Intellectual property, PII, PHI
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What are some traits of a confidential data classification?

A
  1. Very sensitive, needs approval to view
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What are some traits of a critical data classification?

A
  1. Data should always be available
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What are some traits of a financial data classification?

A
  1. Internal company financial information

2. Customer financial details

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What are some traits of a government data classification?

A
  1. Open data
  2. Transfer between government entities
  3. May be protected by law
17
Q

What are some traits of a customer data classification?

A
  1. Data associated with customers
  2. May include user-specific details
  3. Legal handling requirements
18
Q

Explain Tokenization

A

Sends a