From the course: Implementing the NIST Privacy Framework
Unlock this course with a free trial
Join today to access over 25,600 courses taught by industry experts.
Protective technology
From the course: Implementing the NIST Privacy Framework
Protective technology
- [Instructor] The last categories I'll discuss in the Privacy Frameworks Protect-P function are systems maintenance and protective technology. These control the ongoing integrity of your data processing ecosystem and protect the confidentiality, integrity and availability of personal or sensitive data on specific system. First, in the maintenance category, all changes within the data ecosystem are approved, logged and performed in a way that manages any risks to sensitive data on those systems. This means having formal and documented configuration and change management procedures. All tools and processes used for maintenance, repair or administration of the infrastructure must be preapproved. This category is also focused on managing the configuration and changes to your network, systems and applications to protect any sensitive data that reside on it. In the protective technology category, you ensure the security and…