Data Security

Classifications of Data

Application Data

• configuration data
• logging data
• application files

User Data

• personal information (addresses, phone numbers, dates of birth, etc.)
• personal identifying information (social security number, passport numbers, name, etc.)
• health or financial records

Data Protecting Data

• crypto keys
• passwords
• access control lists

2 primary factors in classifying data as sensitive

1. laws and regulations (e.g. GDPR and PCI DSS)
2. business requirements (e.g. what customers of app describe as sensitive data)

Sensitive Data: The set of data that contains elements from user data, application data, and data protecting data such that user data is not exposed to unauthorized parties.