QuestionQ251

Privacy Operational Lifecycle: Protect

Which of the following most effectively supports implementing controls that put privacy policies into effect?

  • A The internal audit department establishing the audit controls which test for policy effectiveness.
  • B The legal department or outside counsel conducting a thorough review of the privacy program and policies.
  • C The Chief Information Officer as part of the Senior Management Team creating enterprise privacy policies to ensure controls are available.
  • D The information technology (IT) group supporting and enhancing the privacy program and privacy policy by developing processes and controls.
Explanation

IT operationalizes privacy policies by developing and maintaining the processes and technical controls that enforce them. Internal audit evaluates controls, legal reviews policy compliance, and senior management establishes direction rather than implementing the controls.

Community Discussion

No comments yet. Be the first to start the discussion!