by Tim Marley We have spent the last two weeks in the CIS Controls series talking about data management and data inventory. Knowing what you are responsible for. Knowing where it lives and how it moves. This week, Control 3.3, is about deciding who gets to touch it. The formal term is a data access control list. I had the same reaction you probably just did. But access permissions? That we understand. Who can see what. Who can change what. Who should not be in certain places at all. Need to...















