CISSP Training Kit

Data management

Policies define how data is to be managed and protected in the enterprise. The operations department is typically responsible for the implementation of the technologies and procedures to satisfy the required management of the data in compliance with those policies, procedures, standards, baselines, and guidelines.

Data management includes:

• The secure storage and transmission of data

• Media management (including removable media)

• Maintaining the systems that store and transmit the data

• Ensuring the availability of the data

• Implementing data redundancy for recovery purposes

• Maintaining the data retention store (archive)

• Secure destruction of unneeded data

• Securely wiping data when media is to be reused

• Protecting faxed data

Data classification ...