What is metadata security? - Definition from WhatIs.com

Definition

metadata security

Part of the Compliance glossary:

Metadata security is the body of practices and policies designed to protect an organization from security risks posed by unauthorized access to information contained in the organization’s metadata.

Metadata is defined as “data about data.” It adds information to data that makes it possible to process it automatically and to effectively find, categorize, share and reuse it, among other things. However, metadata that is accessed by unauthorized parties can pose a significant risk to businesses. Here are a couple of potential scenarios: A potential supplier who accesses metadata in a contract document might learn sensitive details about internal deliberations that put the supplier in a stronger negotiating position.  Opponents in a legal dispute could discover internal discussions about the weak points in an argument.

Document metadata can contain the names of authors and modifiers, the dates of creation and changes and file size. Editing features like the "Track changes" option in Word generate more complex metadata that includes edit changes, revision histories and comment exchanges between authors and editors. Because that content may contain sensitive information, it's important to be aware of metadata security measures and take appropriate steps to protect corporate data assets from unauthorized access. 

One important measure, document sanitization, is the process of ensuring that only the intended information can be accessed from a text-based file before the document is delivered or shared. 

See also: metadata management

This was last updated in August 2014
Posted by: Margaret Rouse

Related Terms

Definitions

  • spin (PR, marketing)

    - Spin, in the context of public relations (PR) and journalism, is the selective assembly of fact and the shaping of nuance to support a particular view of a story. (WhatIs.com)

  • critical infrastructure

    - Critical infrastructure is the body of systems, networks and assets that are so essential that their continued operation is required to ensure the security of a given nation, its economy, and the p... (WhatIs.com)

  • log management

    - Log management is the collective processes and policies used to administer and facilitate the generation, transmission, analysis, storage, archiving and ultimate disposal of the large volumes of lo... (searchITOperations.com)

Glossaries

  • Compliance

    - Terms related to compliance, including regulatory definitions and words and phrases about governance and mitigating IT risk.

  • Internet applications

    - This WhatIs.com glossary contains terms related to Internet applications, including definitions about Software as a Service (SaaS) delivery models and words and phrases about web sites, e-commerce ...

Tech TalkComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.