CISSP考试指南笔记：2.5 隐私保护

Data Owners

The data owners, therefore, indirectly or directly decide who gets access to specific data.In reality, the majority of these decisions should be codified in formal written policies. Any exceptions to policy must be properly documented.

Data Processers

The critical issue here with respect to privacy is that these individuals understand the boundaries of what is acceptable behavior and (just as importantly) know what to do when data is accidentally or intentionally handled in a manner that does not conform to applicable policies. The key issues in terms of privacy protections for this group are training and auditing.

Data Remanence

NIST Special Publication 800-88, Revision 1, “Guidelines for Media Sanitization” (December 2014), describes the best practices for combating data remanence.

剩余内容请看本人公众号debugeeker, 链接为CISSP考试指南笔记：2.5 隐私保护