Data Security, Quality, and Integrity

An important task for defining the needed security for a system or data is to first understand the nature of the data used in a system. Take this opportunity to discuss the sensitivity of the data, and then create a data classification to be used by the organization, and specify the class of data in the systems used by the organization. In addition, security practitioners should be aware of any legal requirements that the company might be subjected to. You will describe at least 1 law or regulation and 1 standard that would apply to the organization, and discuss how they apply. Finally, you need to be able to test and measure how well security is implemented and followed. Describe how controls can be created to enforce the requirements and how auditing can validate the effectiveness of the controls.