QuestionQ268

Privacy Operational Lifecycle: Assess

Which aspect of the data-management life cycle have you, as Privacy Manager, not accounted for?

  • A Auditability.
  • B Minimalism.
  • C Enforcement.
  • D Retrievability.
Explanation

Enforcement requires monitoring compliance with policies and procedures and applying defined sanctions when violations occur. Without a monitoring plan or consequences for noncompliance, controls may be implemented but are not effectively enforced. NIST guidance likewise identifies monitoring for program effectiveness and specific penalties or disciplinary actions for policy violations as policy maturity elements.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!