Data-centered security focuses on what must be secured and the appropriate data protection model, irrespective of where the data is located, if it is stored, used or in transit.
The defining feature of data-centered security is that the protection is applied to the data itself, through classification mechanisms, access control, secure encryption and, when necessary, secure deletion.