image

Data Security – CRUD or CRUDE Matrix

A CRUD or CRUDE matrix is a useful way to capture and display activities and permissions within a system. You can use a CRUD matrix to observe how Processes handle Data or Resources. It is very valuable to combine a CRUD(E) Matrix with the Analysis of User Processes within the System, especially in the Context of the Actors and Roles involved to complete the Picture.

What Does CRUD(E) Stand For?

CRUD(E) is an Acronym that refers to the following actions on an object (Data/Resource, etc):

  • Create – Create and Store
  • Read – Select, Retrieve, and Read
  • Update – Change, Edit, or Modify
  • Delete – Truncate, Delete, Purge, or Remove
  • Execute – Execute or Run

Types of CRUD(E) Matrices

There are two main types of CRUD(E) matrices, depending on what they analyze:

Data CRUD(E) Matrix

This version maps the interactions between processes and data. It identifies what each process can do with specific data sets—whether it’s creating, reading, updating, deleting, or executing data elements.

When the CRUD(E) Matrix shows the links between Process and Data, it is known as the Data CRUD(E) Matrix.

Resource CRUD(E) Matrix

This variation focuses on processes and system resources. It details the level of access and type of interaction processes that occur with hardware, software tools, or external interfaces.
When the CRUD(E) Matrix shows the links between Process and Resource, it is known as the Resource CRUD(E) matrix.

Example:

 CreateReadUpdateDeleteExecute
Accountant-1XXXXX
Accountant-2XXX X
Accountant-3XX  X
Accountant-4XX  X

Leave a Reply

Your email address will not be published. Required fields are marked *

two × 5 =