ISC2 Certified in Cybersecurity (CC)Security OperationsHard
An organization is migrating its data to a new cloud service provider. During this transition, they must ensure that all data transferred and stored in the cloud is encrypted both in transit and at rest, and that access to this data is strictly controlled and logged. This is part of a broader effort to protect information throughout its lifecycle. Which security operations function is most directly concerned with these aspects?
- AData retention
- BData classification
- CSecure disposal
- DData handling
Show answer & explanationAnswer & explanation
Correct answer: D. Data handling
Data handling encompasses the entire process of managing data from creation to destruction, including how it is stored, transmitted, accessed, and processed, with a focus on security controls like encryption and access management.
Why the other options are wrong
- A. Data retention defines how long data is kept, not the security measures applied during its active use.
- B. Data classification categorizes data by sensitivity, which informs handling, but 'data handling' is the overarching practice of applying controls.
- C. Secure disposal focuses on the end-of-life destruction of data, not its protection during active use and transit.
Data Handling
The processes and controls implemented to manage and protect data throughout its entire lifecycle, from creation to destruction.
- Encompasses storage, transmission, processing, access.
- Includes encryption, access controls, auditing.
- Guided by data classification and retention policies.
Memory trick: Handle data with care, from start to end.