Difference between revisions of "Privacy at CNMCyber"

From CNM Wiki
Jump to: navigation, search
(Script)
 
(29 intermediate revisions by 2 users not shown)
Line 1: Line 1:
[[File:Cnm-digital.png|400px|thumb|right|[[CNM Cyber]]]][[Privacy at CNM Cyber]] (hereinafter, the ''Lectio'') is the [[lectio|lesson part]] of the '''[[Cyber Security Essentials]]''' [[lesson]] that introduces its participants to [[CNM Cabin]]. This ''lesson'' belongs to the [[Introduction to CNM Cyber]] session of the [[CNM Cyber Orientation]].
+
[[File:Cnm-digital.png|400px|thumb|right|[[CNMCyber suite]]s]][[Privacy at CNMCyber]] (hereinafter, the ''Lectio'') is the [[lectio|lesson part]] of the '''[[Cyber Security Essentials]]''' [[lesson]] that introduces its participants to [[CNM Cabin]]. This ''lesson'' belongs to the [[Introduction to CNMCyber]] session of [[WorldOpp Orientation]].
  
  
Line 5: Line 5:
 
The predecessor [[lectio]] is [[User Data in Cyber]].
 
The predecessor [[lectio]] is [[User Data in Cyber]].
  
===Key terms===
+
===Script===
:'''[[User data]]'''. Any data that the [[end-user]] of a particular [[system]] creates or owns.<div style="background-color:#efefef; padding: 5px; margin: 15px;">
+
:[[CNMCyber Team]] strives to protect your sensitive data as much as the data can be protected.
:*'''[[Username]]''' ([[login name]], [[account name]], [[handle]], or, rarely, [[ID]]). The humanly-readable name of [[user account]] that the [[end-user]] utilizes to access that ''account''. A ''username'' is an essential part of [[user data]].
+
 
:*'''[[Password]]''' ([[passcode]]). Any string of characters that is used to confirm user's identity. The [[NIST Digital Identity Guidelines]] defines a ''password'' as "the secret is memorized by a party called the claimant while the party verifying the identity of the claimant is called the verifier. When the claimant successfully demonstrates knowledge of the password to the verifier through an established authentication protocol, the verifier is able to infer the claimant's identity.</div>
+
:On the policy side, the ''Team'' tries to adopt very strict protocols to ensure data security, confidentiality, and privacy. Particularly, your sensitive data shall be encrypted whether the data is at rest or in transit. In that way, those who work on [[Opplet]] can get only logical access to the data.
 +
 
 +
:On the technology side, the administrators of [[CNMCyber]] are required to follow general [[cyber-security]] rules -- all its software is regularly updated, new patches are timely applied, constant monitoring is in place, and so on.
  
===Script===
+
:On the human side, each administrator and bureaucrat who works on [[Opplet]] is required to pass [[security clearance]] and sign a [[non-disclosure agreement]] ([[non-disclosure agreement|NDA]]). This agreement legally binds this associate to keep your [[user data]] in secret.
:At [[CNM Cyber]], [[product epic]]s indicate who can manage the [[user data]], what data can be managed, how it can be managed, and what data must be secured. For instance, the [[CNM Cyber Team]] cannot secure your posts at [[CNM Social]], comments at [[CNM Page]] and [[CNM Tube]], as well as anywhere where the other users can see them.
 
  
:Although the texts of your posts at [[CNM Cert]] and [[CNM Wiki]] cannot be private, the [[CNM Cyber Team]] may attempt to protect your identity, while assigning you a [[user alias]] and using that ''alias'' other than your [[username]].
+
:However, some of your data cannot be private. For instance, [[CNMCyber Team]] cannot secure your posts at [[CNMCyber.com]], comments at [[CNM Page]] and [[CNM Tube]], as well as anywhere where the other users can see openly them.
  
:Your sensitive data such as the one at [[CNM Cabin]] and [[CNM Mail]] is protected by [[cyber-security]] from unauthorized accesses and by [[privacy policy]] from improper use.
+
:Although the texts of your posts at [[CNM Cert]] and [[CNM Wiki]] cannot be private, [[CNMCyber Team]] may attempt to protect your identity, while assigning you a [[user alias]] and using that ''alias'' other than your [[username]].
  
:The policy defines how the sensitive ''user data'' shall be secured. Particularly, every member of the [[CNM Cyber Team]] who has to access the data, must sign a [[non-disclosure agreement]]. The ''agreement'' legally-obligates the responsible ''Team'' member not to disclose any sensitive data related to a particular user.  
+
:To add, apprehensions about data theft and privacy are obvious since [[CNM Farms]] uses a [[public cloud]]. This may change when the ''Team'' deploys a new [[hybrid cloud]], but some data would still be stored remotely rather than on the ''Team's'' premises.
  
sensitive [[user data]] from unwelcome use conducted by those users who are authorized to access that data.
+
===Key terms===
 +
:[[Non-disclosure agreement]] ([[non-disclosure agreement|NDA]])
  
ince data is stored remotely rather than your premise, apprehensions about data theft and privacy are obvious. But most cloud computing companies encrypt data while in transit or at rest. Also, their employees only get logical access to your data. Most companies adopt very strict protocols to ensure data security, confidentiality, and privacy.
+
===Closing===
 +
:Would you be interested in knowing more about your data privacy at [[CNMCyber]]?--- Yes/No/I'm not sure
  
If your data has peculiar security requirements, you could opt for a hybrid cloud where some data is stored with the cloud provider while some at your own premises.
 
  
 
'''[[What CNM Cloud Is]]''' is the successor [[lectio]].
 
'''[[What CNM Cloud Is]]''' is the successor [[lectio]].
  
 
==Questions==
 
==Questions==
 
===Lectio quiz===
 
:The answer is recorded for the lectio completion purpose:
 
:*Which statement below is correct:<ol type="a"><li>You can change your [[username]] at [[CNM Cyber]] at any time.</li><li>You can pick a new [[username]] at [[CNM Cyber]] when you create a new [[user account]].</li><li>You cannot change your [[password]] at [[CNM Cyber]].</li><li>All of the other substantive answers are correct</li><li>None of the other answers is correct</li></ol>
 
  
 
===Placement entrance exam===
 
===Placement entrance exam===

Latest revision as of 14:03, 13 April 2024

Privacy at CNMCyber (hereinafter, the Lectio) is the lesson part of the Cyber Security Essentials lesson that introduces its participants to CNM Cabin. This lesson belongs to the Introduction to CNMCyber session of WorldOpp Orientation.


Content

The predecessor lectio is User Data in Cyber.

Script

CNMCyber Team strives to protect your sensitive data as much as the data can be protected.
On the policy side, the Team tries to adopt very strict protocols to ensure data security, confidentiality, and privacy. Particularly, your sensitive data shall be encrypted whether the data is at rest or in transit. In that way, those who work on Opplet can get only logical access to the data.
On the technology side, the administrators of CNMCyber are required to follow general cyber-security rules -- all its software is regularly updated, new patches are timely applied, constant monitoring is in place, and so on.
On the human side, each administrator and bureaucrat who works on Opplet is required to pass security clearance and sign a non-disclosure agreement (NDA). This agreement legally binds this associate to keep your user data in secret.
However, some of your data cannot be private. For instance, CNMCyber Team cannot secure your posts at CNMCyber.com, comments at CNM Page and CNM Tube, as well as anywhere where the other users can see openly them.
Although the texts of your posts at CNM Cert and CNM Wiki cannot be private, CNMCyber Team may attempt to protect your identity, while assigning you a user alias and using that alias other than your username.
To add, apprehensions about data theft and privacy are obvious since CNM Farms uses a public cloud. This may change when the Team deploys a new hybrid cloud, but some data would still be stored remotely rather than on the Team's premises.

Key terms

Non-disclosure agreement (NDA)

Closing

Would you be interested in knowing more about your data privacy at CNMCyber?--- Yes/No/I'm not sure


What CNM Cloud Is is the successor lectio.

Questions

Placement entrance exam