CDPSE: Certified Data Privacy Solutions EngineerDemo

By Isaca · Question Mode

QuestionQ228

Privacy Engineering

When setting up information systems to communicate and transport personal data, an organization should:

  • A adopt the default vendor specifications.
  • B review configuration settings for compliance.
  • C implement the least restrictive mode.
  • D enable essential capabilities only.
Explanation

Data protection by default requires appropriate technical measures that implement data minimization, so systems handling personal data should have only the capabilities necessary for their intended processing enabled. GDPR, Article 25

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!