From the course: Cloud Data, Platform, and Applications Security by Pearson

Unlock this course with a free trial

Join today to access over 25,600 courses taught by industry experts.

Concepts of cloud data security

Concepts of cloud data security

As I've already mentioned, data is a really big aspect of the CCSP exam. In this lesson, we're going to revisit some concepts we've already talked about and introduce some new ones. Let's talk about the data minimization principle, the aforementioned GDPR mandate. We should identify the minimum amount of especially personal data that we need to fulfill our We don't want to get more extraneous information about subjects than we actually need for our job use or our corporate use. We should hold that much information, but no more, using the following checklist. We only collect personal data that we actually need for our specific purposes. We have sufficient personal data to properly fulfill those purposes, and we periodically review the data we hold, and delete or dispose of anything we don't need anymore. As I mentioned, in a discretionary access control model or other access control model, you may have a data owner. An owner is frequently the creator of an object in a DAC model or a…

Contents