Data Maintenance
Throughout its life cycle, data is accessed, viewed, processed, or used in various ways. Maintaining the confidentiality, integrity and availability of the data is key in maintaining the data and its intended purposes. Data maintenance requires organizations to maintain various controls, assuring that only authorized individuals are permitted to view and change the data, that it is being stored securely and that controls are in place to protect it throughout the different phases of the data life cycle.
3 slides · 1 min read · Domain 2
Data in Use
Data in use is in plain text, meaning that while in use the data is at its most vulnerable state; however, there are still controls in place, such as data loss prevention (DLP), digital rights management (DRM), and access controls, that are intended to protect data in use and prevent unauthorized access.
Data at Rest
Data at rest is data that is currently not used by anyone, making it the easiest phase to protect. However, that does not mean that we do not need to allocate time and resources to protecting data at rest. We must identify all the repositories that contain the data, and then define how the data is to be protected. Protecting data at rest requires the data to be stored in a secured way, not accessible without permission. It is also important to think about the way the data is protected, for example, can it be encrypted? And lastly, backups must be made to protect the availability of the data.
Data in Motion
Data in motion refers to the process of sending the data across networks. While in transit, the data is at risk of being intercepted by unauthorized parties, which may result in data exposure as well as alterations and deception. While in motion, the data can be protected using encryption. Encryption can be at the data level, the network level or both.
