Definition

metadata security

Part of the Compliance glossary:

Metadata security is the body of practices and policies designed to protect an organization from security risks posed by unauthorized access to information contained in the organization’s metadata.

Metadata is defined as “data about data.” It adds information to data that makes it possible to process it automatically and to effectively find, categorize, share and reuse it, among other things. However, metadata that is accessed by unauthorized parties can pose a significant risk to businesses. Here are a couple of potential scenarios: A potential supplier who accesses metadata in a contract document might learn sensitive details about internal deliberations that put the supplier in a stronger negotiating position.  Opponents in a legal dispute could discover internal discussions about the weak points in an argument.

Document metadata can contain the names of authors and modifiers, the dates of creation and changes and file size. Editing features like the "Track changes" option in Word generate more complex metadata that includes edit changes, revision histories and comment exchanges between authors and editors. Because that content may contain sensitive information, it's important to be aware of metadata security measures and take appropriate steps to protect corporate data assets from unauthorized access. 

One important measure, document sanitization, is the process of ensuring that only the intended information can be accessed from a text-based file before the document is delivered or shared. 

See also: metadata management

This was last updated in August 2014
Posted by: Margaret Rouse

Related Terms

Definitions

  • Chief Privacy Officer (CPO)

    - A chief privacy officer (CPO) is a corporate executive charged with developing and implementing policies designed to protect customer data from unauthorized access. Other elements of the CPO job in... (WhatIs.com)

  • digital due process

    - Digital due process is an adaptation and extension of that legal concept to protect the rights of individuals with regard to online communications. Due process, in general, is the requirement that ... (WhatIs.com)

  • due process

    - Due process is a legal principle designed to protect the rights of citizens to fair treatment at the hands of the government. The concept is enacted in the United States Constitution. Although Engl... (WhatIs.com)

Glossaries

  • Compliance

    - Terms related to compliance, including regulatory definitions and words and phrases about governance and mitigating IT risk.

  • Internet applications

    - This WhatIs.com glossary contains terms related to Internet applications, including definitions about Software as a Service (SaaS) delivery models and words and phrases about web sites, e-commerce ...

Ask a Question. Find an Answer.Powered by ITKnowledgeExchange.com

Ask An IT Question

Get answers from your peers on your most technical challenges

Ask Question

Tech TalkComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.