Overwriting:
Overwriting: the process of writing new data over existing data on a storage medium to ensure that the original data is no longer recoverable.
Crushing: the process of physically crushing or pulverizing a storage medium such as a hard drive or tape to ensure that the data is no longer recoverable.
Scoping: determining which portion of a standard we will deploy in our organization.
Mission/Business Owner: Senior executives who make the policies that govern our data security.
Data Remanence: Data left over after normal removal and deletion of data.
Degaussing: a process of erasing magnetic data by exposing a hard drive or tape to a strong magnetic field.
Protected Health Information (PHI): information that is linked based on a list of 18 identifiers under the US Health Insurance Portability and Accountability Act (HIPAA) and must be treated with special care.
Users: those who use the data and must be trained on policies, procedures, and standards.
Overwriting: a method of data destruction by writing 0's or random characters over the data.
Retention policy: a policy that determines what, how long, where, and similar topics related to data retention.
Data destruction policy: a policy that determines how to deal with data no longer needed.
Degaussing (for damaged drives): a process of erasing magnetic data by exposing a hard drive or tape to a strong magnetic field, which should ensure no data remanence.
Mandatory Access Control (MAC): a type of access control in which clearance is used to assign levels of authorization for accessing resources.
PROM (Programmable Read-Only Memory): a type of Read-Only memory that can only be written once, normally at the factory.
ROM (Read-Only Memory): a type of Read-Only memory that is nonvolatile and commonly used for the BIOS.
EEPROM (Electrically Erasable Programmable Read-Only Memory): a type of Read-Only memory that is electrically erasable and can be written multiple times.
EPROM (Erasable Programmable Read-Only Memory): a type of Read-Only memory that can be erased and written multiple times by shining an ultraviolet light on a small window on the chip.
Chief Information Officer (CIO): A top-level executive responsible for the technology strategy and operations of an organization.
Day to day technology operations: The ongoing activities and tasks involved in managing and maintaining an organization's technology infrastructure and systems.
E-discovery: The process of collecting, reviewing, and producing electronically stored information (ESI) in response to a legal request or investigation.
Electronically stored information (ESI): Any type of data or information that is created, stored, or transmitted electronically.
Relevant documentation: Any documentation that is related to a specific legal case or investigation and is deemed to be important or useful.
Legal council: A group of lawyers or legal advisors who represent and advise an organization on legal matters.
Legal proceeding: A formal legal process, such as a lawsuit or trial, that involves the resolution of a legal dispute.
Protect data: To take steps to safeguard data from unauthorized access, theft, loss, or damage.
Data in Use: Data that is actively being used or accessed by an organization or its employees.
Clean Desk policy: A set of guidelines that require employees to keep their workstations clear of any sensitive or confidential information when they are not in use.
Print Policy: A set of guidelines that governs how documents and other materials should be printed, distributed, and disposed of within an organization.
View angle privacy screen: A device that attaches to a computer monitor and limits the viewing angle, making it more difficult for others to see the contents of the screen.
Data Custodian: An individual or team responsible for the day-to-day management and maintenance of an organization's data systems and infrastructure.
Backups: Copies of data or information that are stored in a separate location for the purpose of recovery in the event of a disaster or system failure.
Restores: The process of recovering data or information from a backup source.
Patches: Updates or fixes to software or systems that address known vulnerabilities or bugs.
System configuration: The process of setting up and configuring hardware, software, and network settings to meet the needs of an organization.
Data Owner: An individual or team responsible for the overall management and control of an organization's data.
Data at rest: Data that is stored or saved in a fixed location or medium, such as a hard drive, tape, or USB drive.
Disks: Storage media that are used to store data, such as hard disk drives or solid-state drives.
Tapes: A type of storage media that is commonly used for backup and archival purposes.