CompTIA Security+ SY0-601 Exam Cram, 6th Edition

Chapter 35

Sensitive Data and Privacy

This chapter covers the following official Security+ exam objective:

• ▶ 5.5 Explain privacy and sensitive data concepts in relation to security.

Essential Terms and Components

• ▶ data type classification

• ▶ personally identifiable information (PII)

• ▶ data owner

• ▶ data controller

• ▶ data processor

• ▶ data custodian/steward

• ▶ data privacy officer (DPO)

• ▶ information life cycle

• ▶ privacy impact assessment (PIA)

• ▶ terms of agreement

• ▶ privacy notice

Sensitive Data Protection

Information systems today are part of almost everything an organization does. The loss of information and information systems has a material impact on various organizational processes and functions. Privacy therefore requires careful ...