PII Flashcards

Study Notes

PII Overview

PII stands for Personally Identifiable Information, crucial for identifying individuals.
PII can be used alone or combined with other data to identify, contact, or locate an individual.

Health Information

PHI stands for Protected Health Information, a type of PII specifically related to health data.

Risk Management Fundamentals

The risk formula is defined as Threat X Vulnerability X Impact, used to evaluate potential risks.
Risk management encompasses identifying risks, assessing their magnitude, and implementing strategies to mitigate them to an acceptable level.

Risk Assessment Types

Quantitative risk assessment assigns a dollar value to specific risks, aiding in financial evaluation.
Qualitative risk assessment categorizes risks into levels such as low, medium, or high, focusing on degree rather than financial impact.

Advanced Persistent Threats (APTs)

APT stands for Advanced Persistent Threat, denoting prolonged, unauthorized network attacks.
An APT enables intruders to gain long-term access to computer systems without detection.

Risk Management Strategies

Risk acceptance is when a decision is made to tolerate a risk when its management costs exceed the potential loss.
Risk avoidance entails eliminating exposure to risks, often leading to the highest costs in risk mitigation.
Risk limitation blends acceptance and avoidance strategies to reduce overall risk exposure.
Risk transfer involves shifting risk responsibility to a third party, commonly through insurance arrangements.

Description

Test your knowledge of Personally Identifiable Information (PII) with these flashcards. Each card provides definitions and examples to help reinforce your understanding of PII and related concepts. Perfect for anyone looking to learn more about privacy and data protection.