Technical Guidance

From Cybersec Standards
Revision as of 00:07, 26 July 2020 by Shan Senanayake (talk | contribs)
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

This is a collection of external resources for implementing security controls in compliance with data protection and privacy laws.

Technical Security Controls:

Access Control

Implement least privilege, restrict users to only the functionality, data and system information that is required to perform their tasks.

Data Integrity

Data records must be protected from unauthorized modification to ensure data quality and integrity.

Data Protection

Data records, especially sensitive data, must be protected from unauthorized access.

Code Security

Mobile App Security

Healthcare Industry Security

Privacy Compliance:

Data Protection Impact Assessment (DPIA)

Privacy and Anonymity