The business question Where do we use sensitive data? shows a CRUD matrix so that you can understand how an application uses data.
This business question helps you to identify inconsistencies and redundancies in the way data are used in the IT landscape. Review which applications process sensitive data, what kind of data is being handled, and what the application does with this data to identify potential risks you to your company's sensitive data.
The business question Where do we use sensitive data? is available with the base packages IT Transformation Server - FastLane and IT Transformation Server - Enterprise. The use case Information Portfolio Governance must be activated as well as either the use case Basic Data Management or Advanced Data Management.
Navigate to Where do we use sensitive data?
Use the method that is most convenient for you:
- In the left navigation panel, enter Where do we use sensitive data? in the Search Navigation field.
- In the left navigation panel, click Home. In the content area, go to the Business Questions page and click the tile for Where do we use sensitive data?
- In the left navigation panel, expand the sections Business Questions and Risk and click Where do we use sensitive data?
What information is displayed in Where do we use sensitive data?
Alfabet provides two different scenarios to capture data flows in the information architecture. With the use case Basic Data Management, the transfer of data is captured via the business objects. The use case Advanced Data Management adds business data as a child of business object and the transfer of data is capture via the business data. The business question Where do we use sensitive data? will show how applications use either business objects ( Basic Data Management ) or business data ( Advanced Data Management ). Throughout this context, the term 'data' is used as a generic term encompassing both business objects and business data.Learn more about the data management use cases available to capture your information architecture.
The business question shows a CRUD matrix that describes how applications use data. Here's how to interpret the information:
- The Y-axis shows all applications that have data defined or applications that meet filter criteria. To show all applications regardless of data definition or filter criteria, click the
3-dots button > Filter and switch Show All on. - The X-axis shows the data. Depending on your use case, this may be business objects or business data.
- The corresponding cells are filled with a combination of the letters C, R, U, D thus indicating if and how an application uses the data (C=Create, R=Read, U=Update, and D=Delete).
- Confidentiality, integrity, or availability indicators may be displayed on the applications. Point to the indicator to view a tooltip providing details or click the 3-dots button > Show Legend.
How can I edit the data in Where do we use sensitive data?
If you have the relevant access permissions, you can edit the business objects/business data, applications, and data usage in this business question.
- To edit an application, select the application on the Y-axis and click the
button. Specify the application's attributes in the editor. - To edit a business object/business data, select it on the X-axis and click the button. Specify the it's attributes in the editor.
- To edit the data usage, select the data usage in the matrix cell and click the button. Specify the use of the data by the respective application.
What data is required for Where do we use sensitive data?
Alfabet provides two different scenarios to capture data flows in the information architecture. With the use case Basic Data Management, the transfer of data is captured via the business objects. The use case Advanced Data Management adds business data as a child of business object and the transfer of data is capture via the business data. The business question Where do we use sensitive data? will show how applications use either business objects ( Basic Data Management ) or business data ( Advanced Data Management ). Throughout this context, the term 'data' is used as a generic term encompassing both business objects and business data.Learn more about the data management use cases available to capture your information architecture.
Applications and business objects/business data must be in the repository and well-documented. The following data is required to have meaningful results. For each business object/business data:
- Data Classification attribute
- CRUD information
Go to the Data Quality page. The Data Completeness view indicates the data that is recommended for meaningful results to the business question. Scroll to the Pending Issues view to resolve the issues and to ensure that the data is complete. Only the first 5000 issues are displayed.
Go to the Data Source page to review the application data that is used to answer the business question. The data source is a list report and cannot be edited.