DataTerminology.comNEW
Also known as: Information Security for Data
Practices and controls that protect data from unauthorized access, alteration, loss, or theft.
DESCRIPTION
Data security encompasses policies, technologies, and processes that safeguard data across its lifecycle. Core controls include encryption, identity and access management, network segmentation, and monitoring. Frameworks like ISO 27001 and NIST SP 800-53 guide implementation. Effective programs balance confidentiality, integrity, and availability while enabling business use and compliance.
ALTERNATIVE DEFINITIONS
IBM
Data security is the practice of protecting digital information from unauthorized access, corruption or theft throughout its lifecycle.
Emphasizes lifecycle protection and key threat categories.
Microsoft Learn
Security is about protecting data and systems with controls for identity, access, encryption, network, monitoring, and governance.
Frames security broadly with data-specific controls on cloud platforms.
RELATED TERMS
Data Encryption Access Control IAM Data Masking Tokenization Data Loss Prevention Zero Trust Backup and Recovery Audit Logging Secure SDLC
COMPETING TERMS
RELATIONS
- Broader: Security
KNOWLEDGE AREAS
Data Security Data Management Cloud Infrastructure Data Privacy & Compliance
TARGET AUDIENCE
Data Architect Cloud Architect DevOps Engineer Chief Information Officer Data Governance Manager Software Developer
EXTERNAL SOURCES
- Wikipedia - Data security
- NIST - Security controls catalogue
- ISO - ISO 27001 overview
- AWS - Cloud security best practices
TOP QUESTIONS
What is Data Security and what does it protect?
It protects data confidentiality, integrity, and availability against unauthorized access, modification, loss, and theft.
Category: Overview
Which controls are fundamental in Data Security?
Encryption, IAM, access control, network segmentation, backups, monitoring, and governance are core controls.
Category: Requirements
How does Data Security differ from Data Privacy?
Security protects data assets; privacy governs lawful and ethical use of personal data.
Category: Distinction
What standards guide Data Security programs?
ISO 27001 and NIST SP 800-53 provide structured control frameworks and risk management guidance.
Category: Overview
What are common mistakes in Data Security?
Over-permissive access, unencrypted data at rest, weak secrets management, and lack of monitoring.
Category: Mistakes
What is Zero Trust in Data Security?
Zero Trust assumes no implicit trust, enforcing strong identity, least privilege, and continuous verification.
Category: Example
What risks arise from poor Data Security?
Breaches, regulatory penalties, operational outages, and reputational damage can occur.
Category: Risk
How should Data Security be operationalized?
Adopt defense-in-depth, automate policies, monitor continuously, and test incident response regularly.
Category: Management
How does cloud impact Data Security?
Shared responsibility models require strong IAM, key management, and service configuration hardening.
Category: Opinion