Rule Atlas
ISO/IEC 27017: Data Lifecycle Management: Discovery, DLP, DRM, Retention & Disposal
Under ISO/IEC 27017 ((ISC)² / CSA / ISO/IEC 27017), data Lifecycle Management: Discovery, DLP, DRM, Retention & Disposal establishes the authoritative rules tested on the (ISC)² CCSP. Covers data discovery, classification, Data Loss Prevention (DLP), Digital Rights Management (DRM), data retention policies, secure disposal methods (crypto-shredding), and auditability. VoraPrep verifies every threshold, worked table, and practice question below against the current (ISC)² CCSP blueprint.
Core Statutory Concepts
| Feature | DLP | DRM |
|---|---|---|
| Primary Goal | Prevent unauthorized exfiltration of sensitive data | Control usage and distribution of sensitive/copyrighted data |
| Focus | Data in motion, at rest, and endpoint activities | Data content itself, enforcing persistent policies |
| Mechanism | Detects sensitive content, blocks/alerts | Encrypts content, embeds usage rights, requires authentication for access |
| Data Scope | Any sensitive data (PII, financial, IP) | Primarily IP, media, highly confidential documents |
A financial services company has client transaction data stored in a cloud environment, subject to a 7-year retention policy. A specific dataset related to an ongoing legal investigation has reached its 7-year mark. The legal department has issued a 'legal hold' order for this particular dataset. Before the cloud security team proceeds with any data disposition action, what is the most appropriate next step?
Practitioner Application: Data Lifecycle Management: Discovery, DLP, DRM, Retention & Disposal
A new Chief Privacy Officer (CPO) at a global SaaS provider is tasked with strengthening data governance across their multi-cloud infrastructure. Their initial audit reveals inconsistent data classification, potential for sensitive data exfiltration through shadow IT, and a lack of standardized data retention and disposal policies, especially for customer-uploaded content. The CPO needs to implement a comprehensive data lifecycle management program that ensures compliance with global privacy regulations (e.g., GDPR, CCPA) and prevents unauthorized access or accidental exposure. You are presented with several technical and policy-based controls and must recommend a strategy that is both effective and auditable.
- Effective data lifecycle management is a cornerstone of cloud security, ensuring data is protected from creation to destruction. This domain aligns directly with the CCSP Exam Outline (Domains 1–6), particularly in CCSP-2 Cloud Data Security and CCSP-6 Legal, Risk, and Compliance. Core practices are guided by CSA Security Guidance for Critical Areas of Focus in Cloud Computing v4 and ISO/IEC 27017.
- Data Discovery and Classification Before data can be protected, it must be understood. This involves identifying where sensitive data resides and assigning it a classification level.
Common (ISC)² CCSP Distractors on ISO/IEC 27017
- 1⚠️ Exam trap: Assuming DLP is a 'one-size-fits-all' solution. Remember that different DLP deployment models (network, endpoint, storage, CASB) address different attack vectors and data states. A comprehensive strategy requires a combination.
- 2⚠️ Exam trap: Neglecting data in shadow IT. DLP solutions must extend beyond sanctioned corporate applications to detect and prevent sensitive data uploads to unauthorized cloud services (often addressed by CASB DLP).
- 3Data Classification is Foundation: It drives all subsequent protection controls (DLP, DRM, retention).
- 4DLP: Prevents unauthorized exfiltration* from a boundary.
- 5DRM: Controls usage and distribution* of content, even after it leaves the boundary.
Frequently Asked Questions: ISO/IEC 27017
What is the core rule under ISO/IEC 27017 (Data Lifecycle Management: Discovery, DLP, DRM, Retention & Disposal)?
Under ISO/IEC 27017 ((ISC)² / CSA / ISO/IEC 27017), data Lifecycle Management: Discovery, DLP, DRM, Retention & Disposal establishes the authoritative rules tested on the (ISC)² CCSP. Covers data discovery, classification, Data Loss Prevention (DLP), Digital Rights Management (DRM), data retention policies, secure disposal methods (crypto-shredding), and auditability. VoraPrep verifies every threshold, worked table, and practice question below against the current (ISC)² CCSP blueprint.
How is ISO/IEC 27017 tested on the (ISC)² CCSP?
⚠️ Exam trap: Assuming DLP is a 'one-size-fits-all' solution. Remember that different DLP deployment models (network, endpoint, storage, CASB) address different attack vectors and data states. A comprehensive strategy requires a combination. ⚠️ Exam trap: Neglecting data in shadow IT. DLP solutions must extend beyond sanctioned corporate applications to detect and prevent sensitive data uploads to unauthorized cloud services (often addressed by CASB DLP).
Where can I practice (ISC)² CCSP questions on Data Lifecycle Management: Discovery, DLP, DRM, Retention & Disposal?
Test yourself instantly with the free playable (ISC)² CCSP question on this page, or launch VoraPrep's full (ISC)² CCSP adaptive question bank, interactive lessons, and 1:1 exam simulator at voraprep.com/ccsp.