{"id":34610,"date":"2022-10-21T23:03:46","date_gmt":"2022-10-21T17:33:46","guid":{"rendered":"http:\/\/ismiletechnologies.com\/?p=34610"},"modified":"2022-10-21T23:04:39","modified_gmt":"2022-10-21T17:34:39","slug":"understanding-enterprise-data-access-controls-in-a-dataops-world","status":"publish","type":"post","link":"https:\/\/ismiletechnologies.com\/en_us\/dataops\/understanding-enterprise-data-access-controls-in-a-dataops-world\/","title":{"rendered":"Understanding Enterprise Data Access Controls in a DataOps world"},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\tThe nature of the data is becoming ever-increasing & ever-pervasive. Also, the prominence of the cloud-based data storage paradigm is increasing, and all this is driving the mandate to control access to enterprise data namely sensitive, regulated, and Personally Identifiable Information (PII). It is important to prevent the data from being stolen by the hackers & sold on the dark web. Also, regulations such as GDPR & CCPA mandate to control the access to data to prevent hacking by unauthorized persons. These points make implementation of the enterprise data access control policies important which also fulfils the requisite regulatory requirements designed to protect organizational data.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

What is data access control?\u00a0\u00a0\u00a0<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

To best understand data access control, it\u2019s important to define the access control principle and then go into the details of controlling access to data assets or data products. Data access control can be defined as security technique that regulates who or what can view or use resources in the computing environment. The data access control theory states that its main function is to mitigate & reduce the risk to the organization. Data access control is specific to the data or data protection<\/a><\/span> & security & forms an important function of the data security.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

What are different types of access controls?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tFour types of access control can be applied to data.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Mandatory Access Control (MAC)<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\tMAC is a security model in which data access rights are regulated by a central authority dependent on many different levels of security. It is defined as the security strategy that restricts the ability that individual data owners have to given access or deny access to their data.\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Discretionary Access Control (DAC)<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

DAC is in contrast to the previous model MAC. While MAC is the top-most level of access control, DAC works at a much lower or more smaller level. It gives the permissions to individual data owners to draw up and implement their own security policies and allocate security controls to data assets and products.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t
\n\t\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t

Improve the Communication, Integration & Automation of data flow across your Organization<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Calculate your DataOps ROI<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t

\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
<\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t\t\t\t\t\n\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\tProceed<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Role-Based Access Control (RBAC)<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

RBAC is the most common data access control model. In a nutshell, it defines roles based on the discrete requirements of users and participants who require access to the data. This access control model also uses the principle of least privilege based on discrete roles to grant access rights to the company\u2019s data.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t

Attribute-Based Access Control (ABAC)<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

This data access control model is a dynamic method of data access control. In this model, resources like data products are given a series of attributes. And end-users are given access to a data asset on the basis of these attributes when positioned vis-\u00e0-vis to a set of rules, policies, and relationships.<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t
\n\t\t\t\n\t\t\t\t\t\t<\/span>\n\t\t<\/div>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t

Why is data access control essential?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

Data access control must be an important part of any company\u2019s data ecosystem to make sure that enterprise data does not fall in the wrong hands either intentionally or unintentionally. It is also important for the sake of regulatory requirements like those set up by regional, state, and federal governments.<\/p>

Many of the organizations store the following category of data-<\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t

\n\t\t\t\t\t\t\t\t\t