Browse Definitions :
Definition

metadata security

Metadata security is the body of practices and policies designed to protect an organization from security risks posed by unauthorized access to information contained in the organization’s metadata.

Metadata is defined as “data about data.” It adds information to data that makes it possible to process it automatically and to effectively find, categorize, share and reuse it, among other things. However, metadata that is accessed by unauthorized parties can pose a significant risk to businesses. Here are a couple of potential scenarios: A potential supplier who accesses metadata in a contract document might learn sensitive details about internal deliberations that put the supplier in a stronger negotiating position.  Opponents in a legal dispute could discover internal discussions about the weak points in an argument.

Document metadata can contain the names of authors and modifiers, the dates of creation and changes and file size. Editing features like the "Track changes" option in Word generate more complex metadata that includes edit changes, revision histories and comment exchanges between authors and editors. Because that content may contain sensitive information, it's important to be aware of metadata security measures and take appropriate steps to protect corporate data assets from unauthorized access. 

One important measure, document sanitization, is the process of ensuring that only the intended information can be accessed from a text-based file before the document is delivered or shared. 

See also: metadata management

This was last updated in August 2014

Continue Reading About metadata security

SearchCompliance

SearchSecurity

  • cyber attack

    A cyber attack is any attempt to gain unauthorized access to a computer, computing system or computer network with the intent to ...

  • backdoor (computing)

    A backdoor is a means to access a computer system or encrypted data that bypasses the system's customary security mechanisms.

  • post-quantum cryptography

    Post-quantum cryptography, also called quantum encryption, is the development of cryptographic systems for classical computers ...

SearchHealthIT

SearchDisasterRecovery

  • risk mitigation

    Risk mitigation is a strategy to prepare for and lessen the effects of threats faced by a business.

  • call tree

    A call tree is a layered hierarchical communication model that is used to notify specific individuals of an event and coordinate ...

  • Disaster Recovery as a Service (DRaaS)

    Disaster recovery as a service (DRaaS) is the replication and hosting of physical or virtual servers by a third party to provide ...

SearchStorage

  • cloud SLA (cloud service-level agreement)

    A cloud SLA (cloud service-level agreement) is an agreement between a cloud service provider and a customer that ensures a ...

  • NOR flash memory

    NOR flash memory is one of two types of non-volatile storage technologies.

  • RAM (Random Access Memory)

    RAM (Random Access Memory) is the hardware in a computing device where the operating system (OS), application programs and data ...

Close