ITIS-468-47605: Certified Information Systems Security Professional (CISSP) Cert Exam Prep

Data states

Data exists in three states and each needs a different control set: data at rest (storage), data in transit (the network), and data in use (memory and CPU). A complete asset security program covers all three.

• At rest — full-disk or file-level encryption, key management, access control lists.
• In transit — TLS, IPSec VPNs, SSH; never rely on obscurity or private circuits alone.
• In use — memory protection, secure enclaves, limiting screen and clipboard exposure.
• DLP (data loss prevention) inspects data at rest, in motion, and at the endpoint against policy.

Privacy techniques

• Anonymization — irreversibly removes identifying attributes.
• Pseudonymization / tokenization — replaces identifiers with reversible surrogates held separately.
• Masking — hides part of a value (showing only the last four digits).
• Data minimization and purpose limitation — collect only what is needed, use it only for that purpose.