Data Classifacation and compliance

Regulated Data

sensitive information protected by law or rules

Trade Secrets

confidential information giving a business a competitive advantage

intelletual property(IP)

info created and owned by the company

Data sovereignty

data must follow laws of the country where it resides

data controller

“boss of the data” decide what happens with it

data processer

“worker” follows instructions to handle data

Data at rest

storage, database encryption, acl

Data in transit

website traffic, remote, cloud reposistories, tls or ipsec

data in use

ram or cpu, decrpyed, tee mechanisms

Data loss prevention

stops senstive data from leaving the network without authorization

acceptable use police aup

document outlining what users can and cannot do when using company technology

Anomalous Behavior

activity that us unusual

External compliance reporting

for outside authorites