Database Management · Advanced level

Advanced level · Module 3 of 6 · 20 guided hours

Data Security and Privacy

Protect sensitive data with layered access control, row-level security, encryption, auditing and privacy-respecting data practices.

Learning objectives

  • Model threats to a database and apply layered defences
  • Restrict data with row-level security and views
  • Apply encryption, auditing and privacy principles

Topics

  • threat modelling
  • row-level security policies
  • encryption in transit and at rest
  • secrets management
  • audit logging
  • data minimisation, retention and consent

Lessons

  1. Lesson 1 Threats and Layered Defence

    Identify who might misuse or expose data and how, and plan layered defences.

    threat modelattack surfacedefence in depthinsider risk

  2. Lesson 2 Row-Level Security

    Restrict which rows each user can see or change with PostgreSQL row-level security policies.

    row-level security (RLS)policy USING / WITH CHECKsession settingstesting policies

  3. Lesson 3 Encryption and Secrets

    Encrypt data in transit and at rest, and keep credentials out of code and documents.

    TLSencryption at restencrypted backupssecrets management

  4. Lesson 4 Auditing and Privacy Practices

    Record who did what, and apply data minimisation, retention and consent principles.

    audit logdata minimisationretention periodanonymisation and pseudonymisation

Practical activity

Apply row-level security so each clinic sees only its own patients, encrypt connections, add auditing and write a data retention policy.

Expected outcomes

  • Sensitive data protected by design
  • Clear privacy practices

Assessment

Security review: demonstrate that cross-clinic access fails, connections are encrypted and changes are audited; review of the retention policy.

Taught live by an instructor — online or in person. Free course lessons are for self-study and do not lead to a certificate — see registration options.