Data Security Lecture 1

Data Security Lecture 1

• Data is the new oil, emphasizing its crucial role
• Data management framework covers several key areas including governance, integration, architecture, quality, sharing, security, standards, warehousing, and business intelligence
• Data governance is a discipline ensuring policies, processes, standards, roles and responsibilities are in place to manage data as an asset.
• Data governance framework includes policy, structure, processes, and controls.
• Data governance roles include data owner, data steward, and data custodian
• Data owner oversees data in a domain and responsible for access, creation, modification, packaging, deriving benefit from data
• Data steward is a subject matter expert ensuring proper classification, protection, use, and quality of data according to data governance standards
• Data custodian implements and maintains security to meet data owners requirements
• Data user utilizes and interacts with data for various purposes in an organization
• Data quality involves ensuring accuracy, completeness, and consistency of data including processes for validation, cleaning, and matching
• Data quality dimensions include completeness, consistency, uniqueness, accuracy, validity, and timeliness
• Data integration combines data from different systems, encompassing mapping, transformation, and cleansing to provide a unified view
• Data retention involves storing data for a set period based on legal, regulatory and/or business requirements, including archiving, purging, and retention policies
• Data architecture is the process of designing data models and database structures that support business requirements including data modeling, design, and best practices
• Data analytics involves analyzing data to extract insights and make better decisions, including data warehousing, mining, and visualization
• Data security is the process of protecting data from unauthorized access, use, disclosure, modification, or destruction
• Core security pillars include confidentiality, integrity, and availability.
• Confidentiality involves preserving information access and restrictions for personal privacy and proprietary information.
• Integrity ensures data is complete, trustworthy and hasn't been modified by unauthorized users
• Availability guarantees reliable and constant confidential data access by authorized users
• The triple A's in security are authentication, authorization, and accounting
• Authentication involves verifying identity, typically through logins and security measures
• Authorization is the process of granting access rights to resources based on verified identities
• Accountability ensures people are responsible for actions, including logging and auditing systems for tracking activities.