✳ Foundations elective / 1 lesson
Privacy engineering vs security controls
Focused single-lesson path distinguishing system security (protecting data from unauthorized actors via encryption and IAM) from privacy engineering (governing authorized collection, purpose limitation, minimization, and data-subject rights).
This Foundations elective sits after cloud or SaaS shared responsibility. It is not required to finish Foundations.
01Privacy vs security: why an encrypted database can still violate privacy
Security controls protect data from unauthorized outsiders, while privacy governance regulates whether the organization itself is collecting, using, and retaining personal data lawfully and Minimally.
Test your engineering judgment
Every lesson closes with a 4-choice scenario check modeled on real architectural trade-offs. Ready for full hands-on simulations or certification drills?
Open the practice labs ↗ · Launch the CISSP practice simulator ↗