Privacy and data protection Books

Book SynopsisMicroservices Security in Action teaches readers how to secure their microservices applications code and infrastructure. After a straightforward introduction to the challenges of microservices security, the book covers fundamentals to secure both the application perimeter and service-to-service communication. Following a hands-on example, readers explore how to deploy and secure microservices behind an API gateway as well as how to access microservices accessed by a single-page application (SPA). Key Features Key microservices security fundamentals Securing service-to-service communication with mTLS and JWT Deploying and securing microservices with Docker Using Kubernetes security Securing event-driven microservices Using the Istio Service Mesh For developers well-versed in microservices design principles who have a basic familiarity with Java. About the technology As microservices continue to change enterprise application systems, developers and architects must learn to integrate security into their design and implementation. Because microservices are created as a system of independent components, each a possible point of failure, they can multiply the security risk. Prabath Siriwardena is the vice president of security architecture at WSO2, a company that produces open source software, and has more than 12 years of experience in the identity management and security domain. Nuwan Dias is the director of API architecture at WSO2 and has worked in the software industry for more than 7 years, most of which he spent focusing on the API management domain. Both have helped build security designs for Fortune 500 companies including Boeing, Verizon, Nissan, HP, and GE.

Read more less

Book SynopsisPrivacy is a core value of librarianship and yet as a concept, it is difficult to define and in practice, a challenge to uphold. This groundbreaking new book considers how privacy issues can arise in a library context and what library and information professionals can do to protect the privacy of their users. A Practical Guide to Privacy in Libraries features a wide range of practical examples of such issues, providing insights and practical steps which readers can follow. In-depth case studies and scenarios support the examples laid out in the book, while examples of data breaches which have occurred in a library setting, and the lessons we can learn from them, are also included. The book also covers the main legislation governing data protection – GDPR – which will be particularly relevant to European librarians, and international librarians offering services to EU citizens.The book provides a range of tools through which libraries can communicate how they handle the personal data of their users whilst ensuring that they are following best practice with their privacy policy statements, their privacy audits and data protection impact assessments. Privacy is not the same thing as data protection, and the book outlines the differences between these two concepts. Nevertheless, the book has been written with the requirements of data protection law very much in mind.Written in a highly practical manner, this book is essential reading for library and information professionals who need to understand and support privacy in the library setting and a useful reference for students and researchers in the field who need to understand this topic in practice. Trade Review'Pedley is an expert in information law, and his book is a guide for working professionals to use as a reference in the development and management of user privacy policies... The book's 13 main chapters are divided into brief, cogent subsections, and a detailed table of contents makes it easy to find materials on the topics addressed and to get the specific guidance offered at the point of need. Though aimed to meet the needs of librarians working in the UK, the book treats North American examples and principles thoroughly, making it useful for audiences in the US and Canada…This is a book for working administrators and for collections supporting library and information science or curricula addressing issues of privacy. Summing Up: Recommended. Graduate students, researchers, faculty, and professionals' * CHOICE *'Essential reading for library and information professionals who need to understand and support privacy in the library setting and a useful reference for students and researchers in the field who need to understand this topic in practice, A Practical Guide to Privacy in Libraries is an ideal textbook for library system in-service training programs, and must be considered a core and unreservedly recommended addition to community, college, and university Library Science collections and supplemental studies reading lists.' -- James A. Cox * Midwest Book Review *Table of ContentsDisclaimerList of figures and tablesTable of statutes, etc.Table of casesAbbreviationsGlossary of terms Preface1 General law and background1.1 Legal system 1.1.1 Common law system 1.1.2 Civil law system 1.2 Court system 1.2.1 England and Wales 1.2.2 Scotland 1.2.3 Northern Ireland 1.2.4 Judicial reviews 1.2.5 Tribunals 1.3 Sources of law 1.3.1 Progress of UK legislation1.3.2 Law reports 1.3.3 Public international law 1.3.4 Websites 1.4 Legal concepts/terminology1.4.1 Criminal law 1.4.2 Civil law1.4.3 Tort (England, Wales, Northern Ireland)/Delict (Scotland)1.4.4 Contract law 1.4.5 Property1.5 Conclusions References2 Library law2.1 Localism Act 2011 2.2 Public Services (Social Value) Act 2012 2.3 Sustainable Communities Act 2007 and Sustainable Communities Act 2007 (Amendment) Act 20102.4 Public Libraries and Museums Act 19642.5 Local byelaws 2.6 Literary and Scientific Institutions Act 1854 2.7 Library Offences Act 1898 2.8 Prison library service 2.9 School library service 2.10 Equality Act 2010 (section 149: Public sector equality duty) References 283 Copyright3.1 General principles3.1.1 Copyright ownership 3.1.2 Term of protection 3.1.2.1 Unpublished works and the 2039 rule 3.2 Economic and moral rights 3.2.1 Risk management 3.3 Legislative framework 3.3.1 Berne Convention for the Protection of Literary and Artistic Works3.3.2 Universal Copyright Convention3.3.3 Trade-Related Aspects of Intellectual Property Rights3.3.4 World Intellectual Property Organization Copyright Treaty3.3.5 European directives on copyright matters3.3.5.1 On the legal protection of computer programs3.3.5.2 On rental and lending right3.3.5.3 Harmonising the term of copyright protection 3.3.5.4 On the legal protection of databases3.3.5.5 On the harmonisation of certain aspects of copyright and related rights3.3.5.6 On the resale right for the benefit of the author of an original work of art3.3.5.7 On the enforcement of intellectual property rights3.3.5.8 Directive on the term of protection of copyright and certain related rights amending the previous 2006 Directive (‘Term Directive’)3.3.5.9 Directive on certain permitted uses of orphan works3.3.5.10 Directive on collective management of copyright and related rights and multi-territorial licensing ofrights in musical works for online use in the internal market3.3.5.11 Directive on certain permitted uses of certain works and other subject matter protected by copyright and related rights for the benefit of persons who are blind, visually impaired or otherwise print-disabled3.3.6 European Regulations on copyright matters3.3.6.1 Regulation on the cross-border exchange between the Union and third countries of accessible format copies of certain works and other subject matter protected by copyright and related rights for the benefit of persons who are blind, visually impaired or otherwise print-disabled3.3.6.2 Regulation on cross-border portability of online content services in the internal marketThe Intellectual Property (Copyright and Related Rights) (Amendment) (EU Exit) Regulations 20193.3.7 UK legislation 3.3.8 Supplementary case law 3.4 Acts permitted in relation to copyright works 3.4.1 Fair dealing 3.4.1.1 What is substantial? 3.4.2 Non-commercial research 3.4.3 Private study 3.4.4 Illustration for instruction 3.4.5 Quotation 3.4.6 Criticism and review 3.4.7 News reporting 3.4.8 Caricature, parody and pastiche 3.4.9 Text and data mining for non-commercial research3.4.10 The library provisions in the CDPA 3.4.10.1 Copying by librarians on behalf of their users 3.4.10.2 Libraries and educational establishments making works available through dedicated terminals3.5 Licensing 3.5.1 Copyright Licensing Agency 3.5.2 NLA Media Access 3.5.3 Design Artists Copyright Society 3.5.4 Ordnance Survey 3.5.5 The National Archives 3.5.6 Creative Commons 3.6 Digital copyright 3.6.1 Internet 3.6.2 Right of communication to the public 3.6.3 Hyperlinking and deep linking 3.6.4 Database regulations 3.6.5 Archiving and preservation of digital content 3.6.6 Licensing of electronic resources 3.6.7 Digital rights management systems 3.6.8 Digital signatures and copyright declaration forms 3.7 Copyright clearance 3.7.1 Databases of rights owners 3.7.2 Orphan works 3.7.2.1 Orphan works licences 3.8 Open access 3.8.1 Further information 3.9 Ethical and professional issues and conflicts 3.10 Further information References 4 Legal deposit4.1 Introduction 4.2 General principles 4.2.1 Print material 4.2.2 Non-print material 4.3 Enforcement 4.4 Copyright and use of legal deposit material 4.5 Online defamation 4.6 The future 4.7 Further information References 5 Breach of confidence5.1 General principles 5.2 Obligation of confidence and the Freedom of Information Act 5.3 Remedies5.4 Trade secrets5.5 Case law on breach of confidence6 Contracts and licensing agreements6.1 General principle6.2 Negotiating licences 6.2.1 Factors that can make or break a deal6.3 Consortia and standard licences 6.4 Technology solutions 6.5 Use of passwords for licensed products 6.5.1 Usage data 6.6 Further information References7 Data protection7.1 Introduction 7.2 General principles 7.2.1 The GDPR and the DPA 2018 are constantly evolving 7.2.2 Related legislation 7.3 The six data protection principles 7.3.1 First principle7.3.2 Second principle7.3.3 Third principle 7.3.4 Fourth principle 7.3.5 Fifth principle 7.3.6 Sixth principle 7.4 Accountability 7.4.1 Documentation requirements7.4.2 Codes of conduct 7.4.3 Certification7.5 Processing of personal data 7.5.1 Legal bases for processing 7.5.2 Processing of special categories (sensitive personal data) 7.5.3 Consent7.5.4 Transfers of personal data to a third country or an international organisation7.6 Exemptions7.7 Privacy notices 7.8 Register of fee payers7.9 Rights of the data subject 7.9.1 Compensation 7.9.2 Credit reference agencies 7.10 Data breaches 7.10.1 Causes of data breaches7.11 Data protection impact assessments 7.12 Fines and prosecutions 7.12.1 Prosecutions7.13 Data protection issues for libraries 7.13.1 E-books – privacy concerns 7.13.2 Electoral roll information in libraries 7.13.3 Radio Frequency Identification 7.13.4 Outsourcing7.14 Data protection standards7.15 How to protect your information 7.16 Identity theft7.17 Further information References 8 Privacy 8.1 General principles8.2 Obligation of confidence versus breach of privacy8.3 Codes of practice8.4 Injunctions8.5 Privacy and libraries8.6 Case law8.7 Further information References9 Freedom of information9.1 General principles of freedom of information 9.2 The Freedom of Information Act 2000 (FOIA) 9.2.1 Local authorities 9.3 Publication schemes 9.4 Datasets 9.5 Copyright implications of the FOIA 9.6 Freedom of information and library and information professionals 9.7 Freedom of information rights and request procedures 9.8 Exemptions and appeals 9.9 Enforcement 9.10 The Environmental Information Regulations 2004 (EIR) 9.10.1 What is environmental information?9.11 Freedom of information in Scotland 9.12 Freedom of information and data protection 9.12.1 Fees and charges 9.12.2 The time limit for responding to requests9.12.3 The exemptions 9.13 European Union documents 9.14 Further information and keeping up to date 9.14.1 Organisations 9.14.2 Journals 9.14.3 News feeds References 10 Human rights10.1 General principles10.1.1 Human Rights Act 1998 10.1.2 Fundamental Rights Agency 10.2 Guiding principles for library and information professionals 10.3 Human rights and data protection 10.4 Human rights and copyright10.5 Human rights and freedom of expression 10.6 Further informationReferences 11 Re-use of public sector information11.1 Background11.2 General principles11.3 Public task11.3.1 The ‘public task’ of public sector libraries11.4 UK government licensing framework 11.4.1 UK Open Government Licence11.4.2 The non-commercial government licence 11.4.3 The charged licence 11.5 Right to data 11.6 Charging 11.6.1 Public/private partnerships and exclusivity deals 11.7 Complaints procedure 11.8 New Open Data and PSI Directive 11.9 Further information 11.9.1 Organisations 11.9.2 Publications References 12 Defamation12.1 Introduction 12.2 General principles 12.3 Slander 12.4 Libel 12.5 Defences to libel 12.5.1 Truth 12.5.2 Honest opinion (previously known as fair comment) 12.5.3 Publication on a matter of public interest (Defamation Act 2013 section 4)12.5.4 Operators of websites who didn’t post the statement on the website (Defamation Act 2013 section 5)12.5.5 Peer-reviewed statements in scientific or academic journals (Defamation Act 2013 section 6)12.5.6 Privilege (Defamation Act 2013 section 7) 12.5.7 The offer to make amends 12.6 Remedies 12.6.1 Civil action for damages 12.6.2 Costs 12.6.3 An injunction/interdict to prevent repetition 12.7 Defamation and the internet 12.7.1 The liability of internet service providers for other people’s material12.7.2 The application of the limitation period to online archives and the introduction of the single publication rule12.7.3 Exposure of internet publishers to liability in other jurisdictions12.7.4 The risk of prosecution for contempt of court12.7.5 Social networking sites 12.7.6 E-mail libel 12.8 Checklist References Notes 13 Professional liability13.1 General principles 13.2 Contract 13.3 Tort (delict in Scotland)13.4 Liability and electronic information13.5 Liability for copyright infringement13.6 Risk management13.7 Indemnity and insurance References 14 Cybersecurity and cybercrime14.1 Background14.2 Cybersecurity and cyber essentials 14.3 Council of Europe Convention on Cybercrime 14.4 The Computer Misuse Act 1990 14.5 The Network and Information Systems Regulations14.6 Hacking14.7 Viruses, worms and Trojans 14.8 Intellectual property infringement 14.8.1 Plagiarism 14.8.2 Software piracy 14.8.3 Making illegal downloads of music files 14.8.4 Other examples of copyright abuse 14.9 Pornography 14.10 Fraud 14.10.1 Phishing14.10.2 Pharming 14.11 Denial of service attacks 14.12 Acceptable use policies14.13 Communications Act 2003 References 15 Disability discrimination15.1 General principles 15.2 Copyright and the disability exceptions 15.3 The Right to Read 15.4 Website accessibility 15.5 Further information 16 Other legal issues relevant to librarians16.1 Introduction 16.2 Police, surveillance and libraries 16.3 Cloud computing 16.3.1 Escrow agreements16.3.2 Data protection issues16.3.3 Ownership of the data16.4 Stocking extremist/controversial literature16.5 Censorship16.6 Theft or mutilation of rare books16.6.1 Examples of theft by library users16.6.2 Examples of theft by library staff16.7 Lending of audio books and e-books by public libraries16.8 Further informationReferences AppendicesAppendix 1 Brexit and the orphan works exception Appendix 2 CILIP's ethical framework Index

Read more less

Book Synopsis

Read more less

Book SynopsisMaster the practical aspects of information systems auditing to pass the CISA exam and accelerate your career. Purchase of the book unlocks access to web-based exam prep resources like practice questions, flashcards, and more. Purchase of the print or Kindle book includes a free eBook in PDF format. Key Features Enhance your understanding of each topic by practicing a set of exam-oriented questions Revise concepts easily focusing on key aspects from CISA exam perspective, highlighted in each chapter Accelerate your exam prep with additional study material including flashcards, practice questions, and exam tips Book DescriptionWith the latest updates and revised study material, this second edition of the Certified Information Systems Auditor Study Guide provides an excellent starting point for your CISA certification preparation. The book strengthens your grip on the core concepts through a three-step approach. First, it presents the fundamentals with easy-to-understand theoretical explanations. Next, it provides a list of key aspects that are crucial from the CISA exam perspective, ensuring you focus on important pointers for the exam. Finally, the book makes you an expert in specific topics by engaging you with self-assessment questions designed to align with the exam format, challenging you to apply your knowledge and sharpen your understanding. Moreover, the book comes with lifetime access to supplementary resources on an online platform, including CISA flashcards, practice questions, and valuable exam tips. With unlimited access to the website, you’ll have the flexibility to practice as many times as you desire, maximizing your exam readiness. By the end of this book, you’ll have developed the proficiency to successfully obtain the CISA certification and significantly upgrade your auditing career.What you will learn Perform an audit in accordance with globally accepted standards and frameworks Recognize and recommend opportunities for improvement Understand data analytics tools and processes Comprehend the effectiveness of IT governance Evaluate different type of frameworks Manage audit reporting and communication Evaluate evidence collection and forensics processes Who this book is forThis CISA study guide is specifically tailored for anyone with a non-technical background who wants to achieve the CISA certification. It caters to those currently working in or looking to seek employment in IT audit and security management roles.Table of ContentsTable of Contents Audit Planning Audit Execution IT Governance IT Management Information Systems Acquisition and Development Information Systems Implementation Information Systems Operations Business Resilience Information Asset Security and Control Network Security and Control Public Key Cryptography and Other Emerging Technologies Security Event Management

Read more less

Book SynopsisGet to grips with cloud exploits, learn the fundamentals of cloud security, and secure your organization’s network by pentesting AWS, Azure, and GCP effectively Key Features Discover how enterprises use AWS, Azure, and GCP as well as the applications and services unique to each platform Understand the key principles of successful pentesting and its application to cloud networks, DevOps, and containerized networks (Docker and Kubernetes) Get acquainted with the penetration testing tools and security measures specific to each platform Purchase of the print or Kindle book includes a free PDF eBook Book DescriptionWith AWS, Azure, and GCP gaining prominence, mastering their unique features, ecosystems, and penetration testing protocols has become an indispensable skill, which is precisely what this pentesting guide for cloud platforms will help you achieve. As you navigate through the chapters, you’ll explore the intricacies of cloud security testing and gain valuable insights into how pentesters and red teamers evaluate cloud environments effectively. In addition to its coverage of these cloud platforms, the book also guides you through modern methodologies for testing containerization technologies such as Docker and Kubernetes, which are fast becoming staples in the cloud ecosystem. Additionally, it places extended focus on penetration testing AWS, Azure, and GCP through serverless applications and specialized tools. These sections will equip you with the tactics and tools necessary to exploit vulnerabilities specific to serverless architecture, thus providing a more rounded skill set. By the end of this cloud security book, you’ll not only have a comprehensive understanding of the standard approaches to cloud penetration testing but will also be proficient in identifying and mitigating vulnerabilities that are unique to cloud environments.What you will learn Familiarize yourself with the evolution of cloud networks Navigate and secure complex environments that use more than one cloud service Conduct vulnerability assessments to identify weak points in cloud configurations Secure your cloud infrastructure by learning about common cyber attack techniques Explore various strategies to successfully counter complex cloud attacks Delve into the most common AWS, Azure, and GCP services and their applications for businesses Understand the collaboration between red teamers, cloud administrators, and other stakeholders for cloud pentesting Who this book is forThis book is for pentesters, aspiring pentesters, and red team members seeking specialized skills for leading cloud platforms—AWS, Azure, and GCP. Those working in defensive security roles will also find this book useful to extend their cloud security skills.Table of ContentsTable of Contents How Do Enterprises Utilize and Implement Cloud Networks? How Are Cloud Networks Cyber Attacked? Key Concepts for Pentesting Today’s Cloud Networks Security Features in AWS Pentesting AWS Features through Serverless Applications and Tools Pentesting Containerized Applications in AWS Security Features in Azure Pentesting Azure Features through Serverless Applications and Tools Pentesting Containerized Applications in Azure Security Features in GCP Pentesting GCP Features through Serverless Applications and Tools Pentesting Containerized Applications in GCP Best Practices and Summary

Read more less

Book SynopsisUnlock the secrets of malware data science with cutting-edge techniques, AI-driven analysis, and international compliance standards to stay ahead of the ever-evolving cyber threat landscape Key Features Get introduced to three primary AI tactics used in malware and detection Leverage data science tools to combat critical cyber threats Understand regulatory requirements for using AI in cyber threat management Purchase of the print or Kindle book includes a free PDF eBook Book DescriptionIn today's world full of online threats, the complexity of harmful software presents a significant challenge for detection and analysis. This insightful guide will teach you how to apply the principles of data science to online security, acting as both an educational resource and a practical manual for everyday use. Malware Science starts by explaining the nuances of malware, from its lifecycle to its technological aspects before introducing you to the capabilities of data science in malware detection by leveraging machine learning, statistical analytics, and social network analysis. As you progress through the chapters, you’ll explore the analytical methods of reverse engineering, machine language, dynamic scrutiny, and behavioral assessments of malicious software. You’ll also develop an understanding of the evolving cybersecurity compliance landscape with regulations such as GDPR and CCPA, and gain insights into the global efforts in curbing cyber threats. By the end of this book, you’ll have a firm grasp on the modern malware lifecycle and how you can employ data science within cybersecurity to ward off new and evolving threats.What you will learn Understand the science behind malware data and its management lifecycle Explore anomaly detection with signature and heuristics-based methods Analyze data to uncover relationships between data points and create a network graph Discover methods for reverse engineering and analyzing malware Use ML, advanced analytics, and data mining in malware data analysis and detection Explore practical insights and the future state of AI’s use for malware data science Understand how NLP AI employs algorithms to analyze text for malware detection Who this book is forThis book is for cybersecurity experts keen on adopting data-driven defense methods. Data scientists will learn how to apply their skill set to address critical security issues, and compliance officers navigating global regulations like GDPR and CCPA will gain indispensable insights. Academic researchers exploring the intersection of data science and cybersecurity, IT decision-makers overseeing organizational strategy, and tech enthusiasts eager to understand modern cybersecurity will also find plenty of useful information in this guide. A basic understanding of cybersecurity and information technology is a prerequisite.Table of ContentsTable of Contents Malware Data Science Life Cycle Overview An Overview of the International History of Cyber Malware Impacts Topological Data Analysis for Malware Detection and Analysis Artificial Intelligence for Malware Data Analysis and Detection Behavior-Based Malware Data Analysis and Detection The Future State of Malware Data Analysis and Detection The Future State of Key International Compliance Requirements Epilogue – A Harmonious Overture to the Future of Malware Data Science and Cybersecurity

Read more less

Book Synopsis

Read more less

Book SynopsisTake your penetration testing career to the next level by discovering how to set up and exploit cost-effective hacking lab environments on AWS, Azure, and GCP Key Features Explore strategies for managing the complexity, cost, and security of running labs in the cloud Unlock the power of infrastructure as code and generative AI when building complex lab environments Learn how to build pentesting labs that mimic modern environments on AWS, Azure, and GCP Purchase of the print or Kindle book includes a free PDF eBook Book DescriptionThe significant increase in the number of cloud-related threats and issues has led to a surge in the demand for cloud security professionals. This book will help you set up vulnerable-by-design environments in the cloud to minimize the risks involved while learning all about cloud penetration testing and ethical hacking. This step-by-step guide begins by helping you design and build penetration testing labs that mimic modern cloud environments running on AWS, Azure, and Google Cloud Platform (GCP). Next, you’ll find out how to use infrastructure as code (IaC) solutions to manage a variety of lab environments in the cloud. As you advance, you’ll discover how generative AI tools, such as ChatGPT, can be leveraged to accelerate the preparation of IaC templates and configurations. You’ll also learn how to validate vulnerabilities by exploiting misconfigurations and vulnerabilities using various penetration testing tools and techniques. Finally, you’ll explore several practical strategies for managing the complexity, cost, and risks involved when dealing with penetration testing lab environments in the cloud. By the end of this penetration testing book, you’ll be able to design and build cost-effective vulnerable cloud lab environments where you can experiment and practice different types of attacks and penetration testing techniques.What you will learn Build vulnerable-by-design labs that mimic modern cloud environments Find out how to manage the risks associated with cloud lab environments Use infrastructure as code to automate lab infrastructure deployments Validate vulnerabilities present in penetration testing labs Find out how to manage the costs of running labs on AWS, Azure, and GCP Set up IAM privilege escalation labs for advanced penetration testing Use generative AI tools to generate infrastructure as code templates Import the Kali Linux Generic Cloud Image to the cloud with ease Who this book is forThis book is for security engineers, cloud engineers, and aspiring security professionals who want to learn more about penetration testing and cloud security. Other tech professionals working on advancing their career in cloud security who want to learn how to manage the complexity, costs, and risks associated with building and managing hacking lab environments in the cloud will find this book useful.Table of ContentsTable of Contents Getting Started with Penetration Testing Labs in the Cloud Preparing Our First Vulnerable Cloud Lab Environment Succeeding with Infrastructure as Code Tools and Strategies Setting Up Isolated Penetration Testing Lab Environments on GCP Setting Up Isolated Penetration Testing Lab Environments on Azure Setting Up Isolated Penetration Testing Lab Environments on AWS Setting Up an IAM Privilege Escalation Lab Designing and Building a Vulnerable Active Directory Lab Recommended Strategies and Best Practices

Read more less

Book SynopsisAttention to corporate information has never been more important than now. The ability to generate accurate business intelligence, accurate financial reports and to understand your business relies on better processes and personal commitment to clean data. Every byte of data that resides inside your company, and some that resides outside its walls, has the potential to make you stronger by giving you the agility, speed and intelligence that none of your competitors yet have. Data governance is the term given to changing the hearts and minds of your company to see the value of such information quality. The Data Governance Imperative is a business person's view of data governance. This practical book covers both strategies and tactics around managing a data governance initiative. The author, Steve Sarsfield, works for a major enterprise software company and is a leading expert in data quality and data governance, focusing on the business perspectives that are important to data champions, front-office employees, and executives. Steve runs an award-winning and world-recognized blog called the Data Governance and Data Quality Insider, offering practical wisdom.Table of ContentsChapter 1: The need for Data Governance 20 Sins of the Past 21 Where Are The Metrics? 24 Unnecessary Complexity 26 ETL and Data Warehouse 27 Building More Efficiency 29 Reducing Risk and Improving Compliance 36 The Value of an Acquisition 30 Decisions Based on Gut 33 Data Governance and Being Green 33 Why Data Governance? 36 Who Needs Data Governance? 38 Chapter 2: What is data governance? 40 How do different groups see data governance? 40 Defining Data Governance by its Benefits 45 Chapter 3: Defining Data Governance Success 50 Generic Data Governance Success Factors 50 Specific Data Governance Success 55 Chapter 4: Getting Funded for IQ projects 57 The Data Champion 57 Return on Investment 61 Picking the Right Projects 62 Building Credibility 64 Leveraging a Crisis 64 Conversation Starters 65 The 'Do Nothing' Option 70 Overcoming Objections to Data Governance 71 Chapter 5: People - What does a data governance team look like? 77 Data Governance Roles and Responsibilities 77 Data Governance Council 80 Team Performance Goals 82 Methodologies 83 Chapter 6: Painting the Picture 86 Mission Statement 86 Communication Strategies 87 Having Productive Meetings 88 Getting the Data 93 Data Governance Workshops 94 Building a Useful Data Quality Scorecard 95 Views of Data Quality Scorecard 96 Which Key Metrics Do I Track? 97 chapter 7 - Fixing your data 114 Causes and Actions 114 Information Quality and Data Intensive Projects 121 The Six Phases of a Data Intensive Project 121 Phase One: Project Preparation 122 Phase Two: Making the Blueprint 126 Phase Three: Implement 131 Phase Four: Rollout Preparation 133 Phase Five: Go Live 136 Phase Six: Maintain 139 Chapter 8: technologies that support data governance 141 Types of Data Governance Technologies 142 PREVENTATIVE 142 Diagnostic and Health 145 Infrastructure 149 Enrichment 154 Chapter 9: WHAT'S NEXT 155 ITG Resources 157

Read more less