Every piece of data you hold is a liability as well as an asset. It must be protected, it can be breached, and it may be subject to legal requests and privacy rights. That is why modern privacy principles and the CISSP outline stress limiting what you collect, knowing where data lives and maintaining it properly while you hold it. These three ideas reduce risk more cheaply than almost any technical control.
Keep reading for free
Create a free StudyToCert account to read the rest of this lesson: 7 more sections, 6 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.