QuestionQ419

Privacy Engineering

Which of the following is the BEST way to address personal-data security in cloud-based applications?

  • A Increase cloud provider audit requirements.
  • B Inventory all databases holding personal data
  • C Strengthen the perimeter security.
  • D Limit data access based on user context.
Explanation

Context-aware access control enforces least privilege by allowing personal-data access only when the user and the circumstances of the request satisfy policy. In cloud-based environments, access decisions can incorporate identity, role, device posture, location, and other request-time risk signals; this protects data more directly than relying primarily on perimeter controls, audits, or inventorying databases.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!