3.1 Data, Information & Knowledge

3.1.1 Differences and relationships

Data
Data consists of raw, unprocessed facts and figures. On its own, data has little meaning.

Example: Temperature readings or login timestamps.
Information
Information is data that has been processed, organised, or structured so that it has meaning and context.

Example: An average daily temperature calculated from readings.
Knowledge
Knowledge is the understanding gained from information combined with experience, skills, and judgement.

Example: Using temperature trends to plan cooling system upgrades.

3.1.2 Sources for generating data

Human Sources
Data generated by humans includes surveys and forms, where users input information manually.
Artificial Intelligence and Machine Learning
AI systems generate data through automated analysis and learning. There is a risk of feedback loops where biased data reinforces inaccurate outcomes.
Sensors
Sensors collect environmental data such as temperature, acceleration, vibration, sound, light, and pressure.
Internet of Things (IoT)
IoT devices generate continuous data from smart objects such as thermostats, lights, security cameras, and trackers.
Transactions
Transactional data includes customer records, membership details, timestamps, and shopping basket contents.

3.1.3 Ethical data practices and data value metrics

Ethical Data Practices
Ethical data practices ensure data is collected, stored, and used responsibly, fairly, and legally.
Metrics for Determining Data Value
Data value can be assessed using:
  • Quantity – volume of data available
  • Timeframe – how current the data is
  • Source – how reliable the data source is
  • Veracity – accuracy and trustworthiness of data

3.1.4 Organisational use of data and information

How Organisations Use Data
Organisations use data and information to:
  • Analyse patterns and trends
  • Monitor system performance such as load and outages
  • Track user activity and resource access
  • Deliver targeted marketing
  • Assess threats and opportunities

3.1.5 Interrelationships and suitability

Making Judgements About Data and Information
Data must be suitable for its intended purpose. Organisations must evaluate how data is generated, transformed into information, and applied as knowledge, particularly in digital support and security contexts.