Data Security
What is Data Security?
The practice of protecting digital information from unauthorized access, corruption, or theft throughout its entire lifecycle.
Terms that appear alongside data security
Each of these is named in at least one of the same controls as data security. The number is how many controls name both.
- integrity 21 shared controls
- breach notification 20 shared controls
- incident response 19 shared controls
- confidentiality 19 shared controls
- encryption 19 shared controls
- audit 16 shared controls
- nist 15 shared controls
- data protection 14 shared controls
Frameworks that govern data security
What the standards actually require on data security
Requirements naming data security across 6 standards, quoted from the control text.
The controller sets a routine procedure to examine the logs and report issues and measures taken, retains log records for at least 24 months, and informs authorised users that access is monitored.
israel-protection-of-privacy-law-5741-1981::DSR-10(c)-(e) · Data Security Regulations reg. 10(c)-(e): log review, 24-month retention and user notice →State organs that need to collect or use data to perform statutory duties do so within the scope those duties require and under the conditions and procedures laws and regulations provide, preserve the confidentiality of personal privacy, personal information,...
china-data-security-law-dsl::38-39 · Art. 38-39 State organs collect and use data within their statutory duties, keep it confidential, and run data security management systems →Providers and technical supporters must strengthen training-data management and ensure data security; where training data contains personal information they must comply with personal-information protection rules, and where it involves editing biometric informa...
CN-DS-A14 · Training Data Security and Biometric Consent →Protect data from unauthorised access, change, loss and disclosure throughout processing and transfer, applying suitable security to the data operational processes use.
iso-8000-data-quality::61:7.5 · 7.5 Data Security Management (DRS.4) →Define the data security policy: classification, access, acceptable use, privacy and the roles responsible, approved through governance.
dama-dmbok2-data-management-body-of-knowledge-2nd-edition::DS.2.2 · DS.2.2 Define data security policy →A controller must protect the confidentiality, integrity and accessibility of personal data it creates, receives, processes, archives, maintains or transmits;
florida-digital-bill-of-rights-fdbr::2-3.002(2) · Rule 2-3.002(2): general data security practices based on the NIST risk management framework →Questions people ask about data security
What is Data Security?
Why is Data Security important for compliance?
Which compliance frameworks address Data Security?
Where can I learn more about Data Security?
See how Data Security applies across compliance frameworks
Our platform maps 1,016 frameworks with 316K cross-framework control mappings. Explore how this concept is addressed across standards.