Certified Cloud Security Professional (CCSP)Cloud Data SecurityMedium
A cloud provider offers a service that allows customers to categorize their data based on its sensitivity, compliance requirements, and business value. This categorization then automatically triggers appropriate security controls, such as encryption levels, access permissions, and retention policies. What is this service primarily facilitating?
- AData Discovery
- BDigital Rights Management (DRM)
- CData Loss Prevention (DLP)
- DData Classification
Show answer & explanationAnswer & explanation
Correct answer: D. Data Classification
Data classification is the process of categorizing data based on its content, context, and use, which then enables the automatic application of appropriate security controls and policies, directly matching the scenario described.
Why the other options are wrong
- A. Data discovery identifies where data resides, but classification assigns categories that dictate controls.
- B. DRM enforces usage rights on specific content, not the overarching categorization and policy triggering for all data.
- C. DLP is a control that *uses* classification to prevent data exfiltration, but isn't the classification process itself.
Data Classification
The process of organizing data into categories based on its sensitivity, value, and regulatory requirements, which then informs the application of appropriate security controls and policies.
- Categorizes data based on sensitivity and value.
- Informs security controls (encryption, access).
- Drives retention and disposal policies.
- Crucial for compliance and risk management.
Memory trick: Classification is labeling the data to know how to treat it.