))
Episode 97 — Regulatory Constraints — PII, PCI DSS, and Legal Retention
Manage episode 502243181 series 3685432
Вміст надано Jason Edwards. Весь вміст подкастів, включаючи епізоди, графіку та описи подкастів, завантажується та надається безпосередньо компанією Jason Edwards або його партнером по платформі подкастів. Якщо ви вважаєте, що хтось використовує ваш захищений авторським правом твір без вашого дозволу, ви можете виконати процедуру, описану тут https://uk.player.fm/legal.
This episode reviews the regulatory and legal frameworks that affect server administration, focusing on requirements for protecting personally identifiable information (PII) and complying with industry-specific standards such as the Payment Card Industry Data Security Standard (PCI DSS). We explain how legal retention rules dictate how long certain data types must be stored, and how these rules impact storage design, security controls, and backup strategies.
We also explore exam-relevant and real-world examples, such as configuring encryption for credit card data or ensuring secure deletion of PII when retention periods expire. Troubleshooting considerations include verifying compliance through audits, aligning technical controls with policy requirements, and addressing gaps identified during security assessments. Understanding these constraints ensures candidates can design and operate systems that meet both legal and operational obligations. Produced by BareMetalCyber.com, where you’ll find more cyber prepcasts, books, and information to strengthen your certification path.
124 епізодів
Поширити
