QuestionQ18

The U.S. Privacy Environment

If an organization stores highly sensitive data in the same system as low-sensitivity data, what is the most likely result?

  • A The organization will still be in compliance with most sector-specific privacy and security laws.
  • B The impact of an organizational data breach will be more severe than if the data had been segregated.
  • C Temporary employees will be able to find the data necessary to fulfill their responsibilities.
  • D The organization will be able to address legal discovery requests efficiently without producing more information than necessary.
Explanation

A breach affecting a system that contains both highly sensitive and low-sensitivity data can expose the high-sensitivity data as well as the lower-risk data. Separating data by sensitivity helps contain exposure, so commingling it increases the potential severity of a breach.

Community Discussion

No comments yet. Be the first to start the discussion!