From the course: ISACA Certified Information System Manager (CISM) Cert Prep

Unlock this course with a free trial

Join today to access over 25,500 courses taught by industry experts.

Data security and endpoint protection

Data security and endpoint protection

From the course: ISACA Certified Information System Manager (CISM) Cert Prep

Start my 1-month free trial Buy for my team

Data security and endpoint protection

“

- [Instructor] Okay, so continuing on with technical security and technical security controls. Talking about encryption, like we did in the last section, is certainly relevant to the protection of the data itself. And data exists in one of three states. We either have data at rest, data's in motion, or data's in use. So when we talk about data at rest, we're talking about data being stored maybe on a hard drive or a network share. But the idea is that it's been saved to a specific location and exists there until it's removed or acted upon by some other entity. So for data at rest, encryption, like we talked about in the previous section, is the best way to protect the confidentiality. And also, we talked about hashing files to make sure that they haven't been modified as well. So that's certainly relevant to data at rest. One thing that I'll mention, rather than just basic encryption, a step further to protect the data in the event that a hard drive might be, well, let's just say…

Contents