CCDL1 flashcards

32 cards. Read the term and the definition here. The deck at the top of this page is optional.

Data governance operating model

The documented structure assigning decision rights, accountability, and escalation for data assets across owners, stewards, custodians, and a governing council.

Data owner vs steward

The owner is accountable for a data domain and approves policy decisions; the steward executes definitions, quality rules, and issue resolution on the owner's behalf.

Policy versus standard

A policy states mandatory intent and requirements; a standard translates that intent into measurable specifications that controls and audits are tested against.

Preventive versus detective control

A preventive control blocks an action before it occurs, such as an access denial; a detective control identifies it afterward, such as an alert on bulk export.

Data governance KPI

A measurable, attributable indicator of governance performance, such as the percentage of critical data elements with a named accountable owner.

Classification by impact

Assigning a sensitivity tier based on the harm unauthorized disclosure would cause, independent of where the data is stored or copied.

Restricted data tier

The highest sensitivity tier, covering regulated identifiers, credentials, health records, and authentication secrets requiring the strictest handling controls.

Data element inventory

A field-level record of name, definition, classification tier, source system, downstream consumers, and retention rule for each data element.

Sensitive data discovery

Automated scanning using pattern matching and context checks to locate candidate sensitive fields, followed by business validation before catalog tagging.

Shadow data copy

An untracked duplicate of data in backups, exports, or analytics sandboxes; it is the most common gap in classification and inventory coverage.

Data lifecycle stages

Create or acquire, classify, store, use and share, archive, and dispose, each requiring an owner, entry criteria, and mapped controls.

Retention period determination

The retention period is the longer of applicable legal or contractual obligations and documented business need where no obligation applies.

Legal hold effect

A legal hold suspends deletion for named custodians and data regardless of retention expiry, and must be formally released before disposal resumes.

Cryptographic erasure

A disposal method that destroys the encryption keys protecting data, rendering the ciphertext unrecoverable without overwriting the storage medium.

Purpose limitation

A privacy principle restricting later use of collected data to purposes compatible with the purpose stated at collection, unless a new legal basis applies.

Tokenization versus masking

Tokenization substitutes a surrogate value mapped in a protected vault; masking alters displayed values and often remains reversible without a separate vault.

Data residency verification

Confirming storage and processing locations separately, including replication and disaster-recovery copies, because residency rules apply to every copy.

Non-production data protection

Production data used in test environments must be masked, synthesized, or de-identified by an approved method, with no direct production access from test systems.

Processing integrity controls

Input validation, reconciliation totals, duplicate detection, and job failure alerting that verify output correctness rather than relying on job completion status.

RBAC versus ABAC

Role-based access grants permissions by job role; attribute-based access grants by attributes such as department, classification, or purpose, enabling finer context-sensitive control.

Just-in-time privilege elevation

Granting administrative access for a time-bound period with approval and automatic expiry, replacing standing privileged access that audits flag as excessive.

Access review cadence

Privileged and regulated-data access is reviewed at least quarterly, standard access at least annually, plus reviews on role change and termination.

Orphaned account

An active identity with no valid owner or business need, typically left after a transfer or termination, and a recurring audit exception.

Segregation of duties conflict

A combination of privileges letting one identity both execute and conceal an action, such as granting access and also reviewing that access.

Incident response phases

Preparation, detection and analysis, containment, eradication, recovery, and post-incident review, with containment preceding full root-cause analysis.

Notification clock start

Regulatory breach notification deadlines begin at awareness of the incident, not at confirmed root cause, so investigation runs in parallel with notification assessment.

Chain of custody

Documented, unbroken record of who handled incident evidence, when, and how, supported by hashed copies and write-once storage.

Data incident severity drivers

Severity is driven by data classification, volume of affected records, and exposure duration, which together determine notification and escalation obligations.

Data protection impact assessment

A required pre-processing assessment for high-risk activities such as large-scale sensitive data or systematic monitoring, documenting risks and mitigations.

Controller versus processor

A controller determines processing purpose and means; a processor acts only on documented controller instructions and carries contractual security obligations.

Cross-border transfer mechanism

A lawful basis for moving data between jurisdictions, such as an adequacy decision, standard contractual clauses, or binding corporate rules.

Critical data element

A field whose quality materially affects regulatory reporting or a key business process, justifying full quality control coverage and monitoring.