CDPSE: Certified Data Privacy Solutions Engineer

By Isaca · Question Mode

QuestionQ33

VerifiedPrivacy Risk Management and Compliance

As part of a major data-discovery initiative to locate personal data across the organization, the project team has identified the proliferation of personal data stored as unstructured data as a major risk. What should be done FIRST to address this situation?

Explanation

Once unstructured personal data has been discovered and its proliferation identified as a risk, the sensitive unstructured data must next be classified according to its sensitivity and applicable privacy requirements, because classification determines the handling, retention, and access requirements that subsequent steps such as assigning data owners and defining access controls depend on.

Community Discussion

No comments yet. Be the first to start the discussion!