Risk: Where do we use sensitive data?
The business question Where do we use sensitive business data? examines the application portfolio and the business data that is created, read, updated, or deleted by your applications in a CRUD (C=Create, R=Read, U=Update, and D=Delete) matrix. The CRUD analysis identifies inconsistencies and redundancies in the way business data are used in the IT landscape and helps you to easily understand which applications process sensitive data, what kind of data is handled, and what the application does with this data.