Where concerns exist that the sum, or aggregation, of separate pieces of data from within databases could lead to a database user determining more sensitive or classified data, database views in combination with database user access roles are implemented.
Topic
Aggregation of database contents
Applicable to
all
History
Priority
should
Mar 2022
Removed
The recommendation to implement database views and database roles due to aggregated database contents (ISM-1258) was rescinded due to existing recommendations covering the enforcement of the need-to-know principle as part of business as usual practices (ISM-1268).
2015
Where concerns exist that the sum, or aggregation, of separate pieces of information fromwithin databases could lead to a database user determining more highly classified information,database views in combination with database user access roles should be implemented.