Free practice · matching · medium

Practice

Match data risks to controls

Match each information risk to the control that most directly reduces it.

Secure information lifecycle

Classification guides every later data-handling decision

  1. ClassifyIdentify sensitivity and policy
  2. MinimizeUse only what the purpose requires
  3. ProtectChoose approved storage and encryption
  4. ShareName recipients, access, and expiration
  5. RetainFollow the approved lifecycle
  6. RespondReport exposure without delay

Purpose, minimum necessary data, approved storage, specific recipients, retention, and incident reporting keep protection attached to the information.

Match each item