When to use this
Use this register to track test data sets, their source, sensitivity, approval, protection, retention, and deletion.
Related controls
Register
| Data set | Source | Classification | Test purpose | Masked/anonymised? | Approval | Environment | Retention/deletion date | Status |
|---|---|---|---|---|---|---|---|---|
| TBD | Synthetic / production / tokenised / anonymised | TBD | TBD | TBD | TBD | TBD | TBD | TBD |
Review checks
- Synthetic data was considered first.
- Live-data use is justified.
- Test outputs are included in scope.
- Deletion is tracked.
- Template
- Iso27001
- Test information
- Test data
Note Metadata
Aliases: Test Data Register
Source: 90 Templates/Test Information Management Register.md
Related Notes
- A.8.33 Audit Evidence Pack
- ISO 27001 A.8.31 - Separation of Development Test and Production Environments
- ISO 27001 A.8.33 - Test Information
- A.8 Technological Controls MOC
- A.8 Technological Controls Implementation Guide
- A.8 Technological Controls Audit Guide
- A.8 Technological Controls Implementation Audit Risk Mapping
- ISO 27002 Annex A Control Interpretation Map
- Templates MOC