Data Security
Start with the owner, purpose and lifecycle of your data.
Classification and access
Classify by business impact, restrict access by task and avoid copying production data into test environments without controls.
Encryption and key management
Assess transport and storage protection separately. Restrict key access and audit changes. DLP complements rather than replaces a data inventory.
Retention and recovery
Apply an approved retention plan and verify backup recovery. Legal duties require review for your organization and jurisdiction.
Explore the control boundaries
Classify by business impact, restrict access by task and avoid copying production data into test environments without controls.
Assess transport and storage protection separately. Restrict key access and audit changes. DLP complements rather than replaces a data inventory.
Apply an approved retention plan and verify backup recovery. Legal duties require review for your organization and jurisdiction.
Turn the guide into action
Selections stay in this browser. Completion is not a security score.
Questions and limits
Does this page guarantee security?
No. Guidance and tool results are limited to their stated scope. Verify impact in your own environment.
