CIPP/US: Certified Information Privacy Professional/United StatesDemo

Question

Based on the privacy-security problems Roberta identified at the company, what was the most likely cause of the breach?

A Mishandling of information caused by lack of access controls.
B Unintended disclosure of information shared with a third party.
C Fraud involving credit card theft at point-of-service terminals.
D Lost company property such as a computer or flash drive.

Explanation

Unrestricted access to all customer and financial records by low-level employees is a failure of access controls and least privilege. Access should be limited to the information necessary for assigned work, so the described condition enables information mishandling. NIST defines least privilege as restricting user access to the minimum necessary to accomplish assigned tasks.

Learn more

NIST CSRC Glossary: Least Privilege

CIPP/US: Certified Information Privacy Professional/United StatesDemo

AstroTutor

Notes

Readiness

QuestionQ134

Community Discussion