DataTerminology.comNEW
Also known as: Information Security
Protecting information and systems by preserving confidentiality, integrity, and availability through controls and risk management.
DESCRIPTION
Security in data and systems encompasses policies, processes, and controls to safeguard confidentiality, integrity, and availability. It spans identity and access management, encryption, network segmentation, monitoring, and incident response. Effective programs blend preventative, detective, and responsive controls aligned to risk and compliance obligations. In cloud and data platforms, security must be embedded across pipelines and lifecycle. Security intersects with privacy, but focuses on protection irrespective of personal data context.
ALTERNATIVE DEFINITIONS
NIST Glossary
Protecting information and information systems from unauthorized access, use, disclosure, disruption, modification, or destruction.
Broad protective scope across threats and impacts on information and systems.
CISA
Cybersecurity is the art of protecting networks, devices, and data from unauthorized access or criminal use and the practice of ensuring confidentiality, integrity, and availability of information.
Connects practical measures with fundamental CIA triad in a public guidance context.
RELATED TERMS
Cybersecurity IAM Data Encryption Access Control Zero Trust Data Masking Key Management Threat Modeling Compliance Audit Logging
COMPETING TERMS
RELATIONS
- Narrower: Column-Level Security Communications Security Data Security Item Level Security Provable Security Row-Level Security Supply Chain Security Tokenization (Security)
KNOWLEDGE AREAS
Data Security Data Management Cloud AI Governance
TARGET AUDIENCE
Chief Information Officer Chief Technology Officer Data Architect DevOps Engineer Cloud Architect Data Governance Manager
EXTERNAL SOURCES
- Wikipedia - Information security
- ISO/IEC 27001 - Information security management standard
- NIST - Security and privacy controls catalog
- OWASP - Top web application security risks
TOP QUESTIONS
What is the primary goal of Security in data systems?
To preserve confidentiality, integrity, and availability by managing risk through layered controls and governance.
Category: Definition
What are common Security mistakes in cloud data platforms?
Overly broad IAM permissions, public endpoints, missing encryption, and lack of monitoring and key rotation are frequent missteps.
Category: Mistakes
How does Security relate to privacy?
Security protects data from misuse and breaches; privacy governs appropriate use and rights. Both are necessary and complementary.
Category: Misunderstanding
What are essential Security controls for data pipelines?
Identity and access management, encryption in transit/at rest, secret management, network segmentation, and audit logging are key.
Category: Requirements
What is Zero Trust in Security?
Zero Trust assumes no implicit trust; it enforces continuous verification, least privilege, and micro-segmentation across boundaries.
Category: Definition
What Security risks are rising with AI systems?
Data poisoning, model theft, prompt injection, and supply chain risks require new controls and monitoring.
Category: Risks
How should Security be measured?
Track control coverage, incident detection MTTR, vulnerability SLAs, and least-privilege adherence alongside compliance metrics.
Category: Management
Where should organizations start improving Security?
Establish an asset inventory, implement MFA and least privilege, encrypt data, and adopt continuous monitoring and patching.
Category: Learning
What is a hot Security topic today?
Adopting Zero Trust architectures and securing generative AI pipelines are top of mind.
Category: Topic