CCDL1 case studies
CCDL1 · Put your knowledge to work in context.
CCDL1 is a vendor-neutral certification for practitioners who work with data protection and data governance in day-to-day operations - data stewards, privacy and compliance analysts, security engineers with data-scope responsibilities, and IT managers who own data stores or pipelines. It tests whether you can apply governance structures, classification schemes, and lifecycle controls to real environments rather than recite definitions. The eight domains span governance and frameworks, classification and inventory, lifecycle management, storage and processing controls, access and identity, monitoring and incident response, privacy and regulatory compliance, and data quality and integrity. Weighting is fairly even, with governance slightly ahead at 15 percent, so you cannot safely skip a domain and hope the others carry you. The CCDL1 case studies are 5 cases and about 2,527 words.
1Retention Conflict at Northwind Mutual
Northwind Mutual, a regional insurer, runs a cloud data platform holding 1,400 datasets. The central data governance policy says customer records must be retained for seven years and then purged.
554 words, about 3 min2Classifier Noise and a Public Health-Data Bucket
Helio Health, a health-tech SaaS provider, stores 4.2 million objects in a public cloud. An auto-classification tool labels objects as containing protected health information (PHI).
495 words, about 2 min3Deletion Gaps in a 4.8 PB Object Store
Lakeside Retail operates 4.8 PB in object storage. A lifecycle rule is supposed to delete raw clickstream objects after 400 days.
514 words, about 3 min4Orphaned Service Accounts at Volt Manufacturing
Volt Manufacturing has 1,200 service accounts across three cloud tenants. Thirty-seven have administrator privileges; 22% were not reviewed in the last quarter because their owners left.
466 words, about 2 min5Contractor Exfiltration at Meridian Learning
Meridian Learning, a SaaS education platform, retains 90 days of cloud audit logs. GuardDuty alerts on a spike of S3 GetObject calls from a contractor's home IP at 02:00.
498 words, about 2 min