CIPM: Certified Information Privacy ManagerDemo

Question

Based on the email, what should Zoe recommend to Whitney about the informal audit?

A That several audits be conducted in quick succession.
B That the results of the audit eventually be made public.
C That more people assist with conducting audits in the future.
D That the information from the audit be disseminated to key personnel.

Explanation

Audit findings should be communicated to the organizational personnel or roles responsible for addressing them, so affected departments can remediate compliance and security deficiencies. Limiting the information to executive leadership would prevent the personnel who must take corrective action from receiving it. NIST guidance likewise calls for reporting audit findings to organizational personnel or roles.

Learn more

NIST SP 800-171 Rev. 3 — Audit Record Review, Analysis, and Reporting

CIPM: Certified Information Privacy ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ307

Community Discussion