Topic: Governance, Risk Management, And Compliance

Course:

Date: 20210313

Professor: Wentz Wu

Data Governance

• Data: Proprietary Data/企業自有的資料 ; Personal Data 收集來的資料
• Governance: 經營高層的管理作為
  • ISMS : Information System Management System { ISO 27001 ISMS, ISO 27002 Security Controls, ISO 27005 Information Risk, ISO 31000 Risk Management}
  • PIMS: Privacy Information Management System {ISO 27701 PIMS, ISO29314 Privacy Impact Assessment, ISO 29100 Privacy Framework, BS 10012 Personal Information Management}

Data Governance

Enterprise Data Management: 時時都安全=> Life Cycle, States，處處都安全=>Architecture

Enterprise Data Management

資料生命週期 Data Life Cycle P.119

Data Life Cycle

生命週期

• Create 建立(企業內部資料) / 蒐集(個資)
• Store