The client has not integrated controls over asset utilization and has not managed how data is used—by whom, by what applications, with what permissions, and through which channels it can be accessed—requiring the need to monitor and manage the security of data usage.
Correction: Lack of Clarity in the Management of Data Asset Use Subjects
The customer has not established clear management regarding the status of the data use subjects, such as departments, individuals, account numbers, and the authority to use the data internally. This ambiguity in managing the subjects of data asset use necessitates the rational assignment of data access rights to users.
Correction: Lack of Clarity on the Objectives of Data Asset Management
Customers have not effectively managed their internal data assets and lack sufficient clarity regarding the status of sensitive data storage, distribution, and the departments to which it belongs. This issue is indicative of a lack of clear objectives in data asset management and necessitates the establishment of a clear and unambiguous inventory of data assets.