Difference between revisions of "Privacy at CNMCyber"

From CNM Wiki
Jump to: navigation, search
m (Gary moved page Sensitive Data Management to Privacy at CNM Cyber without leaving a redirect)
 
(38 intermediate revisions by 2 users not shown)
Line 1: Line 1:
[[File:Cnm-digital.png|400px|thumb|right|[[CNM Cyber]]]][[Privacy at CNM Cyber]] (hereinafter, the ''Lectio'') is the [[lectio|lesson part]] of the '''[[CNM Cabin Essentials]]''' [[lesson]] that introduces its participants to [[CNM Cabin]]. This ''lesson'' belongs to the [[CNM Cyber for Experience]] session of the [[CNM Cyber Orientation]].
+
[[File:Cnm-digital.png|400px|thumb|right|[[CNMCyber suite]]s]][[Privacy at CNMCyber]] (hereinafter, the ''Lectio'') is the [[lectio|lesson part]] of the '''[[Cyber Security Essentials]]''' [[lesson]] that introduces its participants to [[CNM Cabin]]. This ''lesson'' belongs to the [[Introduction to CNMCyber]] session of [[WorldOpp Orientation]].
  
  
Line 5: Line 5:
 
The predecessor [[lectio]] is [[User Data in Cyber]].
 
The predecessor [[lectio]] is [[User Data in Cyber]].
  
===Key terms===
+
===Script===
:'''[[User data]]'''. Any data that the [[end-user]] of a particular [[system]] creates or owns.<div style="background-color:#efefef; padding: 5px; margin: 15px;">
+
:[[CNMCyber Team]] strives to protect your sensitive data as much as the data can be protected.
:*'''[[Username]]''' ([[login name]], [[account name]], [[handle]], or, rarely, [[ID]]). The humanly-readable name of [[user account]] that the [[end-user]] utilizes to access that ''account''. A ''username'' is an essential part of [[user data]].
+
 
:*'''[[Password]]''' ([[passcode]]). Any string of characters that is used to confirm user's identity. The [[NIST Digital Identity Guidelines]] defines a ''password'' as "the secret is memorized by a party called the claimant while the party verifying the identity of the claimant is called the verifier. When the claimant successfully demonstrates knowledge of the password to the verifier through an established authentication protocol, the verifier is able to infer the claimant's identity.</div>
+
:On the policy side, the ''Team'' tries to adopt very strict protocols to ensure data security, confidentiality, and privacy. Particularly, your sensitive data shall be encrypted whether the data is at rest or in transit. In that way, those who work on [[Opplet]] can get only logical access to the data.
 +
 
 +
:On the technology side, the administrators of [[CNMCyber]] are required to follow general [[cyber-security]] rules -- all its software is regularly updated, new patches are timely applied, constant monitoring is in place, and so on.
 +
 
 +
:On the human side, each administrator and bureaucrat who works on [[Opplet]] is required to pass [[security clearance]] and sign a [[non-disclosure agreement]] ([[non-disclosure agreement|NDA]]). This agreement legally binds this associate to keep your [[user data]] in secret.
 +
 
 +
:However, some of your data cannot be private. For instance, [[CNMCyber Team]] cannot secure your posts at [[CNMCyber.com]], comments at [[CNM Page]] and [[CNM Tube]], as well as anywhere where the other users can see openly them.
  
===Script===
+
:Although the texts of your posts at [[CNM Cert]] and [[CNM Wiki]] cannot be private, [[CNMCyber Team]] may attempt to protect your identity, while assigning you a [[user alias]] and using that ''alias'' other than your [[username]].
:[[User data]] is any [[data]] that an [[end-user]] of a particular system, including [[CNM Cabin]], creates or owns. This data may have several levels.
 
  
:For instance, you have created your [[username]] at [[CNM Cabin]], but don't own that. This is a feature of this ''system''; this feature can be changed only if the system's code is re-written or system's settings are changed. You can possibly open a new [[user account]] and pick up a new ''username'', but your current ''account'' will keep the same name for its life being.
+
:To add, apprehensions about data theft and privacy are obvious since [[CNM Farms]] uses a [[public cloud]]. This may change when the ''Team'' deploys a new [[hybrid cloud]], but some data would still be stored remotely rather than on the ''Team's'' premises.
  
:At the same time, you have created your password and own that -- you can change it at any time through [[CNM Cabin]]. Similarly, you can manage your profile and preferences there.
+
===Key terms===
 +
:[[Non-disclosure agreement]] ([[non-disclosure agreement|NDA]])
  
:The overwhelming majority of ''your data'' such as your exam scores or [[wikipage]] edits are collected automatically, through the algorithms that systems administrators manage. While using [[CNM Cyber]], you create that ''data'', but may or may not be able to change it. By default, the data is [[timestamp]]ed is harder or impossible to change. However, a new action like a new ''wikipage'' edit can undo or reverse the previous action.
+
===Closing===
 +
:Would you be interested in knowing more about your data privacy at [[CNMCyber]]?--- Yes/No/I'm not sure
  
:On the other end, the system administrators can alternate your access permissions at any time. They may also change some, but not all of that ''data''. For instance, the course teacher may override some of your exam scores. At [[CNM Cyber]], [[product epic]]s define who can manage the ''user data'', what data can be managed, how it can be managed, and how it shall be secured.
 
  
 
'''[[What CNM Cloud Is]]''' is the successor [[lectio]].
 
'''[[What CNM Cloud Is]]''' is the successor [[lectio]].
  
 
==Questions==
 
==Questions==
 
===Lectio quiz===
 
:The answer is recorded for the lectio completion purpose:
 
:*Which statement below is correct:<ol type="a"><li>You can change your [[username]] at [[CNM Cyber]] at any time.</li><li>You can pick a new [[username]] at [[CNM Cyber]] when you create a new [[user account]].</li><li>You cannot change your [[password]] at [[CNM Cyber]].</li><li>All of the other substantive answers are correct</li><li>None of the other answers is correct</li></ol>
 
  
 
===Placement entrance exam===
 
===Placement entrance exam===

Latest revision as of 14:03, 13 April 2024

Privacy at CNMCyber (hereinafter, the Lectio) is the lesson part of the Cyber Security Essentials lesson that introduces its participants to CNM Cabin. This lesson belongs to the Introduction to CNMCyber session of WorldOpp Orientation.


Content

The predecessor lectio is User Data in Cyber.

Script

CNMCyber Team strives to protect your sensitive data as much as the data can be protected.
On the policy side, the Team tries to adopt very strict protocols to ensure data security, confidentiality, and privacy. Particularly, your sensitive data shall be encrypted whether the data is at rest or in transit. In that way, those who work on Opplet can get only logical access to the data.
On the technology side, the administrators of CNMCyber are required to follow general cyber-security rules -- all its software is regularly updated, new patches are timely applied, constant monitoring is in place, and so on.
On the human side, each administrator and bureaucrat who works on Opplet is required to pass security clearance and sign a non-disclosure agreement (NDA). This agreement legally binds this associate to keep your user data in secret.
However, some of your data cannot be private. For instance, CNMCyber Team cannot secure your posts at CNMCyber.com, comments at CNM Page and CNM Tube, as well as anywhere where the other users can see openly them.
Although the texts of your posts at CNM Cert and CNM Wiki cannot be private, CNMCyber Team may attempt to protect your identity, while assigning you a user alias and using that alias other than your username.
To add, apprehensions about data theft and privacy are obvious since CNM Farms uses a public cloud. This may change when the Team deploys a new hybrid cloud, but some data would still be stored remotely rather than on the Team's premises.

Key terms

Non-disclosure agreement (NDA)

Closing

Would you be interested in knowing more about your data privacy at CNMCyber?--- Yes/No/I'm not sure


What CNM Cloud Is is the successor lectio.

Questions

Placement entrance exam