From the course: CSSLP Cert Prep: 2 Secure Software Requirements

Unlock the full course today

Join today to access over 22,600 courses taught by industry experts or purchase this course individually.

Disposition

Disposition

From the course: CSSLP Cert Prep: 2 Secure Software Requirements

Start my 1-month free trial

Disposition

- [Instructor] Over the lifetime of your app, it's going to collect more and more user data. The collection part is easy. Getting rid of data when you need to get rid of it, now, that's a different story. As a CSSOP, you should make sure you've considered how you'll dispose of any data you've collected. The concept of data disposition is pretty straightforward. When you don't need it anymore, get rid of it. But there's more to it than that. Your data disposition process needs to be defensible. It needs to stand up to the scrutiny of auditors and lawyers alike. So you'd better be sure you understand your process inside and out. You'll find yourself performing a balancing act once again, as you work with the dev and storage Teams to build out your data disposal process. Remember, there are benefits to keeping as much data as you possibly can. Your organization may have revenue streams tied to targeted advertising. That…

Contents