CDPSE: Certified Data Privacy Solutions EngineerDemo

By Isaca · Question Mode

QuestionQ309

Privacy Risk Management and Compliance

An organization identifies a risk that data subject access requests might not be handled within the regulatory timeline. The organization chooses to outsource the data subject access request process to a third party. Which risk response does this illustrate?

  • A Risk transfer
  • B Risk acceptance
  • C Risk reduction
  • D Risk avoidance
Explanation

Risk transfer shifts the management or financial consequences of a risk to another party, such as through outsourcing a process to a third-party provider.

Community Discussion

No comments yet. Be the first to start the discussion!