CompTIA Security+ SY0-601 Cert Guide, 5th Edition

Chapter 35

Understanding Privacy and Sensitive Data Concepts in Relation to Security

This chapter covers the following topics related to Objective 5.5 (Explain privacy and sensitive data concepts in relation to security) of the CompTIA Security+ SY0-601 certification exam:

• Organizational consequences of privacy and data breaches

  • Reputation damage

  • Identity theft

  • Fines

  • IP theft

• Notifications of breaches

  • Escalation

  • Public notifications and disclosures

• Data types (Classifications)

  • Public

  • Private

  • Sensitive

  • Confidential

  • Critical

  • Proprietary

  • Personally identifiable information (PII)

  • Health information

  • Financial information

  • Government data

  • Customer data

• Privacy enhancing technologies

  • Data minimization

  • Data masking

  • Tokenization

  • Anonymization ...