[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:iso-27001\u002Fa-8-11":3},{"item":4,"lessons":16,"controls":38,"related":65},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"iso-27001","a-8-11","Annex A 8.11","ISO\u002FIEC 27001:2022 Annex A 8.11: Data masking",5,"International Organization for Standardization (ISO) and IEC","**What it asks for.** This control expects data masking to be used in line with the organisation's access control policy, other related policies and business requirements, taking applicable legislation into account.\n\n**In practice.** Good practice means identifying where sensitive data, especially personal data, is used beyond its primary purpose, such as in test environments, analytics or support tools, and applying techniques such as masking, pseudonymisation or anonymisation. The chosen method is matched to the risk of re-identification. Auditors look for rules on when masking is required and evidence that it is applied, for example in test data.\n\n**Common gaps.** Common gaps are copies of production data used for testing without masking, and pseudonymised data treated as if it were anonymous.",null,"https:\u002F\u002Fwww.iso.org\u002Fstandard\u002F27001","See the standard at ISO","2026-10-18T15:18:43.664+00:00",{"total":9,"list":17},[18,22,26,30,34],{"slug":19,"title":20,"published_at":21},"email-aliases-as-a-privacy-shield-against-tracking-and-phishing","Email Aliases as a Privacy Shield Against Tracking and Phishing","2026-08-29T16:20:23.767+00:00",{"slug":23,"title":24,"published_at":25},"forensic-dna-software-flaw-enables-undetectable-file-tampering","Forensic DNA Software Flaw Enables Undetectable File Tampering","2026-08-04T12:21:10.335+00:00",{"slug":27,"title":28,"published_at":29},"exfilsquad-leaks-100000-uk-police-records-in-pnld-breach","ExfilSquad Leaks 100,000+ UK Police Records in PNLD Breach","2026-08-03T16:20:41.584+00:00",{"slug":31,"title":32,"published_at":33},"polish-financial-ombudsman-fined-after-it-failure-exposes-data-to-28000-unauthorised-entities","Polish Financial Ombudsman Fined After IT Failure Exposes Data to 28,000+ Unauthorised Entities","2026-06-30T10:22:18.722+00:00",{"slug":35,"title":36,"published_at":37},"vodafone-espaa-fined-105m-for-unauthorized-line-registration-and-personal-data-disclosure","Vodafone España Fined €1.05M for Unauthorized Line Registration and Personal Data Disclosure","2026-06-24T12:20:51.897+00:00",[39,44,48,53,57,61],{"slug":40,"name":41,"problem":42,"stories":43},"data-loss-prevention","Data loss prevention (DLP)","Sensitive data cannot quietly leave by email, upload, USB stick or AI tool.",2,{"slug":45,"name":46,"problem":47,"stories":43},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",{"slug":49,"name":50,"problem":51,"stories":52},"patch-management","Automated patch management","Known holes get closed in days, not months.",1,{"slug":54,"name":55,"problem":56,"stories":52},"cloud-security-posture","Cloud security posture management (CSPM and CNAPP)","Misconfigured cloud storage and over-permissive roles get caught before they leak.",{"slug":58,"name":59,"problem":60,"stories":52},"asset-inventory","Cyber asset inventory","You cannot patch, monitor or protect the devices, cloud resources and accounts you do not know you have.",{"slug":62,"name":63,"problem":64,"stories":52},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",[66,72,77,81,86,90,94,97],{"family":67,"item":68,"code":69,"title":70,"together":71},"gdpr","5","Article 5(1)(f)","Principles relating to processing of personal data",4,{"family":67,"item":73,"code":74,"title":75,"together":76},"32","Article 32","Security of processing",3,{"family":67,"item":78,"code":79,"title":80,"together":76},"25","Article 25","Data protection by design and by default",{"family":82,"item":83,"code":84,"title":85,"together":76},"cis","3","Control 3","Data Protection",{"family":87,"item":88,"code":89,"title":89,"together":76},"itil","overview","ITIL",{"family":82,"item":91,"code":92,"title":93,"together":43},"6","Control 6","Access Control Management",{"family":82,"item":68,"code":95,"title":96,"together":43},"Control 5","Account Management",{"family":82,"item":98,"code":99,"title":100,"together":43},"13","Control 13","Network Monitoring and Defense"]