CDPSE: Certified Data Privacy Solutions EngineerDemo

By Isaca · Question Mode

QuestionQ29

Privacy Engineering

Which of the following must be identified FIRST to define the privacy requirements used when evaluating the selection of IT systems?

  • A Type of data being processed
  • B Applicable control frameworks
  • C Applicable privacy legislation
  • D Available technology platforms
Explanation

Applicable privacy legislation establishes the legal privacy obligations and control requirements that IT systems must satisfy. Those obligations provide the baseline for assessing whether a system is suitable for the intended processing.

Community Discussion

No comments yet. Be the first to start the discussion!