规模化数据保护的自动化,第二部分

Part two of a series on how we provide powerful, automated, and scalable data privacy and security engineering capabilities at Airbnb

关于我们如何在Airbnb提供强大的、自动化的、可扩展的数据隐私和安全工程能力系列的第二部分

Elizabeth Nammour, Pinyao Guo, Wendy Jin

Elizabeth Nammour,Pinyao Guo,Wendy Jin

Introduction

简介

In Part 1 of our blog series, we introduced the Data Protection Platform (DPP), which enables us to protect data in compliance with global regulations and security requirements. We stressed that understanding our data, by keeping track of where personal and sensitive data is stored in our ecosystem, is a necessary building block to protecting the data. In this blog post, we will discuss the challenges companies often face when trying to pinpoint the exact location of personal and sensitive data. As a stopgap, many companies rely on engineers to manually keep track of where and how personal and sensitive data flows within their environments. However, relying on manual data classifications presents some challenges:

我们博客系列的第一部分,我们介绍了数据保护平台(DPP),它使我们能够按照全球法规和安全要求保护数据。我们强调,通过跟踪个人和敏感数据在我们的生态系统中的存储位置,了解我们的数据,是保护数据的必要基石。在这篇博文中,我们将讨论公司在试图确定个人和敏感数据的确切位置时经常面临的挑战。作为一种权宜之计,许多公司依靠工程师手动跟踪个人和敏感数据在其环境中的流动位置和方式。然而,依靠人工数据分类带来了一些挑战。

  1. Data is constantly evolving. This makes it challenging for engineers to have a global understanding of the data and how the data flows throughout a company’s infrastructure. Data can be replicated and propagated into different data stores. Also, new types of data can be collected as products arise or change.
  2. 数据是不断发展的。这使得工程师对数据以及数据如何在整个公司的基础设施中流动有一个全局性的了解成为一种挑战。数据可以被复制和传播到不同的数据存储中。同时,随着产品的出现或变化,新的数据类型也可以被收集。
  3. Manual classification is more prone to error. Engineers may forget if a data asset contains personal data, or perhaps, as is the case in freeform user entries, may not know what an asset contains.
  4. 人工分类更容易出错。工程师可能会忘记一项数据资产是否包含个人数据,或者也许像自由格式的用户条目那样,不知道一项资产包含什么。
  5. Security and privacy personal data elements keep expanding. Engineers have to perform the manual data classification exercise again for any new data elements required b...
开通本站会员,查看完整译文。

Accueil - Wiki
Copyright © 2011-2024 iteam. Current version is 2.137.1. UTC+08:00, 2024-11-15 15:19
浙ICP备14020137号-1 $Carte des visiteurs$