Data Security

Cybersecurity Foundations

Part 6 of 13

Data Security Explained

How Do We Protect an Organization's Most Valuable Asset—Its Data?

A Practical Guide for Students, Fresh Graduates, and Early Career Cybersecurity Professionals

---

"Applications, networks, and devices are important, but they all exist to create, process, store, and share one asset—data. Protecting that data throughout its lifecycle is one of the primary objectives of modern cybersecurity."

---

1. Introduction

Imagine a customer logs into their online banking application to transfer money.

Their identity has been verified using Multi Factor Authentication.

Their laptop has passed endpoint security checks.

The communication between their device and the bank is protected using encrypted network connections.

The banking application has been developed following secure software development practices.

Everything appears secure.

But what is the application actually protecting?

The answer is data.

Every transaction, customer profile, account balance, payment instruction, and audit log exists because of data.

Without data, applications have no purpose, business operations cannot continue, and organizations cannot deliver services.

This is why cybersecurity ultimately focuses on protecting information.

Data is one of the most valuable assets owned by any organization. It represents customer trust, business knowledge, financial records, intellectual property, and operational information that organizations depend on every day.

Whether data is stored in databases, shared across networks, processed by applications, or backed up in the cloud, it must remain protected against unauthorized access, alteration, disclosure, and loss.

This is where Data Security plays a critical role.

Data Security focuses on protecting information throughout its entire lifecycle—from creation and storage to usage, sharing, archiving, and secure disposal.

Rather than protecting only the systems that process information, Data Security focuses on protecting the information itself wherever it exists.

Why This Matters

Every organization depends on data to operate.

Examples include:

• Customer Information
• Financial Records
• Employee Information
• Healthcare Records
• Intellectual Property
• Contracts and Legal Documents
• Research Data
• Business Reports

If this information is compromised, the consequences may include financial losses, regulatory penalties, operational disruption, and loss of customer confidence.

Protecting data is therefore not only a cybersecurity responsibility but also a business priority.

 

2. What Is Data?

Data is any information that is created, collected, stored, processed, or shared by individuals and organizations.

Every digital activity generates data. Whether you send an email, make an online payment, upload a document, or access a customer record, you are interacting with data.

Organizations rely on data to deliver services, support business operations, make informed decisions, and create value for customers. As digital transformation continues, the volume of information generated every day is increasing rapidly, making data one of the most valuable organizational assets.

Understanding the different types of data is the first step toward protecting it effectively.

Types of Data

Organizations manage many different categories of information, each requiring an appropriate level of protection.

Personal Data

Personal data is any information that identifies or relates to an individual.

Examples include:

• Name
• National ID or Passport Number
• Email Address
• Mobile Number
• Home Address
• Date of Birth

Organizations have a responsibility to protect personal data from unauthorized access, disclosure, and misuse.

Financial Data

Financial data supports banking, accounting, and business operations.

Examples include:

• Bank Account Numbers
• Credit Card Information
• Payment Transactions
• Financial Statements
• Payroll Records

Because of its value, financial data is a frequent target for cybercriminals.

Healthcare Data

Healthcare organizations manage highly sensitive information about patients.

Examples include:

• Medical Records
• Laboratory Results
• Prescriptions
• Insurance Information
• Patient History

Protecting healthcare data is essential for maintaining patient privacy and trust.

Business Information

Organizations generate valuable operational and business information every day.

Examples include:

• Business Plans
• Contracts
• Internal Policies
• Sales Reports
• Operational Procedures
• Internal Communications

Although this information may not always be personal, it often requires strong protection.

Intellectual Property

Intellectual property represents an organization's knowledge, innovation, and competitive advantage.

Examples include:

• Source Code
• Product Designs
• Research Findings
• Patents
• Trade Secrets
• Engineering Drawings

The loss or theft of intellectual property can have significant financial and competitive consequences.

Structured and Unstructured Data

Data is commonly classified based on how it is organized.

Structured Data

Structured data follows a predefined format, making it easy to store, search, and analyze.

Examples include:

• Customer Databases
• Employee Records
• Banking Transactions
• Inventory Systems

Unstructured Data

Unstructured data does not follow a fixed format and often requires additional processing.

Examples include:

• Emails
• PDF Documents
• Images
• Audio Recordings
• Videos
• Presentations
• Chat Messages

Most organizational information today exists in unstructured formats, making its protection equally important.

Where Does Data Exist?

Data is no longer stored in a single location. Modern organizations create, process, and store information across multiple environments, including:

• Employee Computers
• Mobile Devices
• Business Applications
• Databases
• Cloud Platforms
• Email Systems
• Backup Systems
• Removable Storage Media

Regardless of where data resides, it should be protected using appropriate security controls.

Business Example

Consider an online retailer processing a customer order.

During a single purchase, the organization processes multiple types of data, including the customer's name, delivery address, payment information, purchase history, and order details.

Although the customer simply sees a successful order confirmation, the organization is responsible for protecting all of this information throughout the transaction.

This illustrates why understanding different types of data is essential before applying appropriate security controls.

 

Remember Data exists in many forms and locations. Understanding what data an organization holds is the first step toward protecting it effectively.

 

 

3. Why Data Security Matters

Data is the foundation of every modern organization.

Every business decision, financial transaction, customer interaction, and operational process depends on accurate and reliable information.

Whether it is a bank processing payment, a hospital managing patient records, a retailer fulfilling online orders, or a government agency delivering public services, data enables organizations to operate efficiently and serve their customers.

As organizations continue to embrace digital transformation, cloud computing, artificial intelligence, and remote working, the volume of data being created, processed, and shared continues to grow at an unprecedented rate.

This growth has made data one of the most valuable—and most frequently targeted—assets in the digital world.

Why Attackers Target Data

Cybercriminals target data because of its value.

Unlike physical assets, data can be copied, transferred, and sold without the owner's knowledge.

Stolen information may be used for:

• Identity Theft
• Financial Fraud
• Ransomware Attacks
• Corporate Espionage
• Blackmail and Extortion
• Unauthorized Access
• Competitive Advantage

The more valuable the information, the more attractive it becomes to attackers.

Common Data Security Risks

Organizations face numerous threats that may expose or compromise sensitive information.

Unauthorized Access

Individuals gain access to information beyond their assigned permissions.

Data Breaches

Sensitive information is exposed through cyber-attacks, human error, or system vulnerabilities.

Insider Threats

Employees, contractors, or third parties may intentionally or unintentionally expose confidential information.

Malware and Ransomware

Malicious software can steal, encrypt, or destroy valuable organizational data.

Accidental Data Loss

Information may be deleted, misplaced, or shared incorrectly due to human error.

Cloud Misconfiguration

Incorrect security settings may unintentionally expose sensitive cloud-hosted information.

Business Impact

A data security incident can affect an organization in many ways.

Potential consequences include:

• Financial Losses
• Operational Disruption
• Regulatory Penalties
• Legal Consequences
• Reputational Damage
• Loss of Customer Trust
• Competitive Disadvantage

Recovering from a major data breach often requires significant time, financial investment, and organizational effort.

Business Example

Imagine a healthcare organization that accidentally exposes thousands of patient records due to an incorrectly configured cloud storage service.

The hospital's applications continue to function normally.

The network remains operational.

Employee devices are secure.

However, confidential patient information has been exposed.

This demonstrates an important principle:

Even when systems remain operational, failing to protect the data itself can have serious business, legal, and reputational consequences.

Data Security Is Everyone's Responsibility

Protecting data is not solely the responsibility of the cybersecurity team.

Every employee who creates, accesses, stores, shares, or disposes of information contributes to protecting organizational data.

Following data handling requirements, respecting data classification, reporting security incidents, and handling information responsibly all help reduce the risk of data loss and unauthorized disclosure.

Building a strong security culture is therefore just as important as implementing technical security controls.

Remember Cybersecurity ultimately exists to protect information. Applications, networks, and devices are important, but their primary purpose is to safeguard the organization's data.

 

4. Understanding Data Security

Data Security is the practice of protecting information from unauthorized access, disclosure, modification, destruction, or loss throughout its entire lifecycle.

Unlike Network Security, which protects data while it is transmitted, or Application Security, which protects software and its processes, Data Security focuses on protecting the information itself—regardless of where it is stored, processed, or shared.

Whether information resides in databases, cloud platforms, laptops, mobile devices, backup systems, or business applications, organizations must ensure that it remains secure, accurate, and available to authorized users.

As organizations continue to generate and rely on increasing volumes of information, protecting data has become one of the most important objectives of modern cybersecurity.

Objectives of Data Security

The primary objectives of Data Security are to:

• Protect sensitive information from unauthorized access.
• Prevent accidental or intentional data loss.
• Maintain the accuracy and integrity of information.
• Ensure data is available whenever authorized users require it.
• Support business continuity.
• Protect customer trust and organizational reputation.
• Meet legal, regulatory, and contractual obligations.

Ultimately, Data Security enables organizations to use information confidently while reducing cybersecurity risks.

The CIA Triad

The foundation of Data Security is based on three fundamental principles, commonly known as the CIA Triad.

These principles guide how organizations protect and manage information.

Confidentiality

Confidentiality ensures that information is accessible only to authorized individuals.

Examples include:

• Access Control
• Multi Factor Authentication (MFA)
• Encryption
• Data Classification

The objective is to prevent unauthorized disclosure of sensitive information.

Integrity

Integrity ensures that information remains accurate, complete, and trustworthy throughout its lifecycle.

Examples include:

• Digital Signatures
• Checksums
• Audit Logs
• Version Control

Organizations must ensure that data cannot be altered without proper authorization.

Availability

Availability ensures that authorized users can access information whenever it is needed.

Examples include:

• Backup and Recovery
• High Availability Systems
• Disaster Recovery
• Redundant Infrastructure

Without availability, information cannot support business operations, even if it remains confidential and accurate.

Business Example

Consider an online university that stores student records.

Only authorized staff should be able to access academic records (Confidentiality).

Grades must remain accurate and protected from unauthorized changes (Integrity).

Students and faculty should be able to access the system whenever required (Availability).

Maintaining all three principles ensures that the university can deliver reliable and secure educational services.

Data Security Is a Shared Responsibility

Protecting data is not solely the responsibility of the cybersecurity team.

Every employee who creates, accesses, processes, stores, or shares information contributes to protecting organizational data.

For example:

Role	Responsibility
Employees	Handle information securely and follow data handling requirements
Business Owners	Define data ownership and classification
IT Teams	Secure infrastructure and storage systems
Developers	Build applications that protect organizational data
Cybersecurity Teams	Define security controls, monitor risks, and respond to incidents
Management	Establish governance, policies, and promote a security-aware culture

When everyone understands their responsibilities, organizations are better equipped to protect their information assets.

 

Remember Data Security is not just about protecting technology—it is about protecting the information that enables every business process, decision, and service.

  

5. Data Classification

Not all information has the same value or requires the same level of protection.

For example, a company's public marketing brochure does not require the same security controls as customer account information, employee records, or confidential business strategies.

Applying the highest level of protection to every piece of information would be costly and inefficient. Conversely, applying insufficient protection to sensitive information can expose an organization to significant security, financial, and regulatory risks.

To address this challenge, organizations classify data based on its sensitivity, business value, and potential impact if it is disclosed, altered, or lost.

This process is known as Data Classification.

Why Data Classification Matters

Data Classification helps organizations:

• Identify sensitive information.
• Apply appropriate security controls.
• Support regulatory and legal compliance.
• Reduce the risk of data breaches.
• Improve information handling and storage.
• Enable secure sharing of information.

By understanding the value of information, organizations can protect it more effectively while allowing business operations to continue efficiently.

Common Data Classification Levels

Although classification schemes vary between organizations, most follow four common levels.

Public

Information that is approved for public disclosure and can be shared without restrictions.

Examples include:

• Company Website Content
• Marketing Brochures
• Press Releases
• Public Reports

Disclosure of public information generally has little or no business impact.

Internal

Information intended for internal organizational use.

Examples include:

• Internal Procedures
• Training Materials
• Staff Announcements
• Organizational Charts

While not highly sensitive, this information should not normally be shared outside the organization without authorization.

Confidential

Information that could cause harm to the organization or its stakeholders if disclosed without authorization.

Examples include:

• Customer Information
• Financial Reports
• Employee Records
• Contracts
• Internal Audit Reports

Confidential information requires stronger security controls such as encryption, access restrictions, and monitoring.

Restricted

The most sensitive category of information.

Access is limited to authorized individuals with a legitimate business need.

Examples include:

• Encryption Keys
• Authentication Credentials
• Trade Secrets
• Strategic Business Plans
• Highly Sensitive Personal Information

Unauthorized disclosure of restricted information could result in severe financial, operational, legal, or reputational consequences.

Business Example

Consider a manufacturing company.

A product brochure published on the company's website may be classified as Public.

Employee policies may be classified as Internal.

Customer contracts and supplier agreements may be classified as Confidential.

Future product designs and proprietary manufacturing processes may be classified as Restricted.

Each category requires a different level of protection based on its sensitivity and business value.

Applying Security Controls

Once information has been classified, organizations apply appropriate security controls.

For example:

• Public information may be freely shared.
• Internal information may be limited to employees.
• Confidential information may require encryption and access controls.
• Restricted information may require additional monitoring, strict access approvals, and enhanced protection.

This ensures that security measures are proportionate to the value and sensitivity of the information.

 

Remember Not all data requires the same level of protection. Data Classification helps organizations apply the right security controls to the right information.

 

 

6. Data Lifecycle

Data does not remain in a single location or serve a single purpose throughout its existence.

From the moment information is created until it is securely destroyed, it passes through several stages. At each stage, different security risks and protection requirements must be considered.

This journey is known as the Data Lifecycle.

Understanding the Data Lifecycle helps organizations apply appropriate security controls throughout the life of the information rather than protecting it only after it has been created.

Why the Data Lifecycle Matters

Information is constantly moving.

It may be:

• Created by employees or customers.
• Stored in databases or cloud platforms.
• Accessed by authorized users.
• Shared with business partners.
• Archived to meet legal or business requirements.
• Securely disposed of when it is no longer needed.

Each stage introduces different risks and requires different security controls.

Protecting data throughout its lifecycle reduces the likelihood of unauthorized access, accidental disclosure, data loss, and regulatory non-compliance.

Stages of the Data Lifecycle

1. Create

Data is generated through business activities.

Examples include:

• Customer registrations
• Online purchases
• Employee records
• Business documents
• Emails
• Financial transactions

Security should begin at the moment data is created.

2. Store

Information is stored for future use.

Examples include:

• Databases
• File Servers
• Cloud Storage
• Backup Systems
• Business Applications

Stored information should be protected using appropriate access controls, encryption, and backup mechanisms.

3. Use

Authorized users access and process information to perform business activities.

Examples include:

• Processing customer transactions
• Reviewing employee information
• Generating reports
• Updating records

During this stage, organizations should ensure that only authorized users can access the information.

4. Share

Organizations often share information internally and externally.

Examples include:

• Sending emails
• Sharing reports
• Collaborating with business partners
• Exchanging information through APIs

Data should be shared securely using approved communication channels and appropriate protection mechanisms.

5. Archive

Some information must be retained even when it is no longer actively used.

Archived information supports:

• Legal requirements
• Regulatory compliance
• Business continuity
• Historical reference

Archived data should remain protected against unauthorized access and modification.

6. Dispose

When information is no longer required, it should be securely disposed of.

Examples include:

• Secure deletion of files
• Destruction of storage media
• Permanent removal from cloud storage
• Secure disposal of paper records

Simply deleting a file does not always remove it permanently. Organizations should follow approved disposal procedures to prevent unauthorized recovery.

Business Example

Consider a university managing student records.

Student information is created during admission.

It is stored in the student information system.

Faculty members access the records to manage academic progress.

Transcripts are securely shared with authorized organizations when requested.

Records are archived after graduation in accordance with retention requirements.

When the retention period expires, the records are securely destroyed following the university's data retention and disposal policies.

Throughout this lifecycle, the university remains responsible for protecting the confidentiality, integrity, and availability of the information.

Security Throughout the Lifecycle

Data Security is most effective when security controls are applied at every stage of the lifecycle.

Examples include:

• Data Classification during creation.
• Encryption during storage.
• Access Control during use.
• Secure transmission during sharing.
• Retention controls during archiving.
• Secure disposal procedures at the end of the lifecycle.

By protecting information from creation to disposal, organizations significantly reduce the risk of data breaches and unauthorized disclosure.

 

Remember Data Security is not a one-time activity. Information must be protected throughout its entire lifecycle—from creation to secure disposal.

 

 

7. Core Data Security Controls

Understanding the value of data and its lifecycle is only the beginning.

Organizations must implement appropriate security controls to protect information from unauthorized access, accidental disclosure, modification, and loss.

These controls work together to ensure that data remains confidential, accurate, and available throughout its lifecycle.

Rather than relying on a single technology, organizations apply multiple layers of protection to reduce cybersecurity risks.

Access Control

Access Control ensures that only authorized individuals can access specific information.

Organizations apply the principle of least privilege, granting users only the access required to perform their job responsibilities.

Examples include:

• Role Based Access Control (RBAC)
• Multi Factor Authentication (MFA)
• Privileged Access Management (PAM)
• User Access Reviews

Effective access control significantly reduces the risk of unauthorized disclosure.

Encryption

Encryption converts readable information into an unreadable format that can only be accessed using the appropriate decryption key.

Organizations commonly encrypt data:

• At Rest (stored in databases, laptops, and storage systems)
• In Transit (transmitted across networks)
• During Backup and Archiving

Encryption helps protect information even if storage devices are lost or communications are intercepted.

Data Loss Prevention (DLP)

Data Loss Prevention (DLP) solutions help organizations prevent sensitive information from being lost, shared without authorization, or transferred outside approved channels.

DLP solutions can:

• Detect sensitive information
• Monitor data movement
• Block unauthorized transfers
• Alert security teams
• Enforce organizational data handling policies

DLP plays an important role in reducing accidental and intentional data leakage.

Data Masking

Data Masking protects sensitive information by replacing original values with fictional or partially hidden data.

Examples include:

• Displaying only the last four digits of a credit card number
• Hiding portions of a national identification number
• Masking customer information in test environments

This allows information to be used while reducing the exposure of sensitive data.

Backup and Recovery

Data must remain available even during system failures, cyber incidents, or disasters.

Organizations perform regular backups to ensure critical information can be restored when required.

Backup strategies should include:

• Regular backup schedules
• Secure storage
• Encryption of backup data
• Periodic recovery testing

A backup is only valuable if it can be successfully restored.

Monitoring and Auditing

Organizations continuously monitor how information is accessed and used.

Examples include:

• Monitoring file access
• Recording administrative activities
• Detecting unusual data transfers
• Reviewing audit logs
• Investigating suspicious behaviour

Continuous monitoring helps organizations detect security incidents more quickly.

Secure Disposal

When information is no longer required, it should be disposed of securely.

Secure disposal methods include:

• Secure file deletion
• Cryptographic erasure
• Physical destruction of storage media
• Certified disposal services

Proper disposal reduces the risk of unauthorized recovery of sensitive information.

Business Example

Consider a financial services organization handling customer account information.

Only authorized employees can access customer records (Access Control).

Sensitive customer data is encrypted while stored and transmitted (Encryption).

DLP monitors and prevents unauthorized sharing of customer information (Data Loss Prevention).

Customer account numbers are partially hidden when displayed on employee screens (Data Masking).

Regular backups ensure information can be restored following a system failure (Backup and Recovery).

System logs are monitored to detect suspicious access attempts (Monitoring and Auditing).

When customer information reaches the end of its retention period, it is securely deleted in accordance with organizational policies (Secure Disposal).

Each control contributes to protecting sensitive information throughout its lifecycle.

 

Remember No single security control can protect organizational data. Effective Data Security relies on multiple layers of protection working together throughout the information lifecycle.

 

 

8. Modern Data Protection

As technology continues to evolve, protecting data has become more complex than ever before.

Organizations no longer store information only in on-premises data centers. Today, data is created, processed, and shared across cloud platforms, mobile devices, business applications, artificial intelligence (AI) tools, and remote work environments.

To address these challenges, organizations adopt modern data protection strategies that combine technology, governance, and security best practices.

Cloud Data Security

Cloud computing has transformed how organizations store and manage information.

While cloud platforms provide scalability and flexibility, organizations remain responsible for protecting the data they place in the cloud.

Good practices include:

• Encrypting sensitive information.
• Applying strong access controls.
• Monitoring user activities.
• Regularly reviewing cloud configurations.
• Backing up critical information.

Protecting cloud-hosted data is now a fundamental part of every organization's cybersecurity strategy.

Artificial Intelligence and Data Protection

Artificial Intelligence (AI) is rapidly changing the way organizations create, process, and analyze information.

AI tools can improve productivity, automate repetitive tasks, and support decision-making.

However, organizations should also ensure that sensitive information is handled responsibly when using AI technologies.

Good practices include:

• Do not upload confidential or restricted information to unauthorized AI platforms.
• Review AI-generated outputs before using them.
• Follow organizational policies governing the use of AI.
• Protect customer information and intellectual property when interacting with AI tools.

Responsible use of AI helps organizations benefit from innovation while reducing information security risks.

Privacy

Organizations collect and process significant amounts of personal information.

Protecting privacy involves ensuring that personal data is collected, used, shared, and retained responsibly.

Privacy is supported by practices such as:

• Collecting only the information that is necessary.
• Limiting access to authorized personnel.
• Protecting personal information using appropriate security controls.
• Securely disposing of personal data when it is no longer required.

Strong privacy practices help build customer confidence and support regulatory compliance.

Data Governance

Technology alone cannot protect organizational information.

Effective Data Security also requires clear governance.

Data Governance establishes how information is:

• Owned
• Classified
• Stored
• Shared
• Retained
• Protected
• Disposed of

Clearly defined policies, standards, and responsibilities help ensure that information is managed consistently across the organization.

Zero Trust for Data

Modern cybersecurity increasingly follows the Zero Trust principle.

Instead of automatically trusting users or systems, organizations continuously verify access requests before granting access to sensitive information.

Zero Trust for data focuses on:

• Verifying user identity.
• Validating device security.
• Applying least privilege access.
• Monitoring user activity.
• Continuously protecting sensitive information.

This approach helps reduce the risk of unauthorized access, even within trusted organizational environments.

Business Example

Consider a multinational organization whose employees work from offices, homes, and while traveling.

Customer information is stored in cloud applications, accessed through laptops and mobile devices, analysed using approved AI tools, and shared with business partners around the world.

Protecting this information requires more than traditional perimeter security.

The organization must combine cloud security, identity verification, encryption, governance, privacy controls, and continuous monitoring to ensure information remains protected wherever it is accessed.

 

Remember Modern Data Security focuses on protecting information wherever it exists—not just within the organization's network.

 

 

9. Career Opportunities

As organizations continue to generate, process, and store increasing volumes of information, the demand for professionals who can protect sensitive data continues to grow.

Data Security is one of the fastest-growing areas within cybersecurity and plays a critical role across industries including banking, healthcare, government, education, manufacturing, and technology.

Professionals in this field help organizations protect information, comply with regulations, reduce cybersecurity risks, and maintain customer trust.

Career opportunities include:

Data Security Analyst

Monitors and protects organizational information by implementing security controls, investigating incidents, and supporting data protection initiatives.

Data Loss Prevention (DLP) Engineer

Designs, implements, and manages DLP solutions to prevent unauthorized disclosure or loss of sensitive information.

Data Governance Specialist

Develops policies, standards, and processes to ensure information is classified, managed, and protected consistently across the organization.

Data Protection Officer (DPO)

Oversees data protection and privacy programs, ensuring that personal information is managed responsibly and in accordance with applicable legal and regulatory requirements.

Information Security Analyst

Protects organizational information by identifying risks, implementing security controls, monitoring security events, and supporting incident response activities.

Data Security Architect

Designs secure data protection strategies, including encryption, access control, secure storage, backup, and data lifecycle management.

Why Choose Data Security?

Every organization depends on information.

Professionals working in Data Security help ensure that this information remains protected, accurate, and available while supporting business operations and customer trust.

For individuals interested in governance, risk management, privacy, compliance, and information protection, Data Security offers a rewarding and future-focused career path.

10. Knowledge Check

Test your understanding of the concepts covered in this guide.

1. What is the primary objective of Data Security?

A. Increase internet speed

B. Protect information throughout its lifecycle

C. Purchase security software

D. Improve computer performance

Answer: B

2. Which of the following is an example of Confidential data?

A. Company marketing brochure

B. Public website content

C. Customer account information

D. Press release

Answer: C

3. Which stage is NOT part of the Data Lifecycle?

A. Create

B. Store

C. Manufacture

D. Archive

Answer: C

4. What is the primary purpose of Data Classification?

A. Increase storage capacity

B. Categorize information based on its sensitivity and apply appropriate protection

C. Compress files

D. Improve network speed

Answer: B

5. Which security control helps prevent sensitive information from being shared without authorization?

A. Firewall

B. Antivirus

C. Data Loss Prevention (DLP)

D. Printer

Answer: C

11. Key Takeaways

• Data is one of the most valuable assets owned by any organization.
• Data Security protects information throughout its entire lifecycle.
• Different types of data require different levels of protection.
• Data Classification helps organizations apply appropriate security controls.
• The Data Lifecycle demonstrates that information must be protected from creation through secure disposal.
• Security controls such as encryption, access control, Data Loss Prevention (DLP), backup, and monitoring work together to protect organizational information.
• Modern Data Protection combines technology, governance, privacy, and security best practices to safeguard information wherever it exists.

12. Continue Your Learning

Previous Article

Part 5 – Application Security Explained

Next Article

Part 7 – Email Security Explained

Business Question

How do organizations protect email communications from phishing, malware, business email compromise, and data loss?