Managing Catastrophic Loss of Sensitive Data

Chapter 3. Controls and Safeguards

Solutions in this chapter:

• Data Security Program

• Security Controls

• Technical Safeguards

• Access Control

• Activity Logging and Monitoring

• Software Assurance

• Change Management

• Disaster Recovery/Business Continuity Planning

• Training and Awareness

• Auditing

Summary

Data Security Program

An organization’s data security program will enable the management and control of identified data security risks. It can significantly influence reputational, operational, legal, and strategic risks by limiting the organization’s vulnerability to data compromise and maintaining third-party confidence and trust.

The data security program includes data ...