CHAPTER 13Data Sanitization and Information Lifecycle Management
Managing data sanitization is a shared responsibility, just as managing data is. Practically everyone in an organization is involved in the creation of data as they write, measure, code, present, and communicate. The IT staff members deal with data every day as their applications collect and store it and their systems log data.
The first step to managing data sanitization is to recognize its importance. This may be driven from a compliance requirement dictated by your regional government or your industry sector regulator. It is far better to become aware of these requirements in the early phase of their enactment; often there is a public comment period that calls for your contribution. Another driver is becoming aware of the security implications of data that could become exposed when it leaves your control. One more is the legal requirements for data retention. Reducing the data that is archived can reduce the burden during an ediscovery process in a civil suit.
The worst way to discover the need for data sanitization is when data is leaked or stolen, a regulator comes knocking, or a civil suit lodges a “do not expunge” action.
13.1 The Data Sanitization Team
When first launching ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access