CDPSE: Certified Data Privacy Solutions Engineer

By Isaca · Question Mode

QuestionQ44

VerifiedPrivacy Risk Management and Compliance

Which of the following should be put in place FIRST before remote access to a data store that contains personal data is authorized?

Explanation

A privacy policy establishes the governing requirements for handling personal data, including authorized use, access expectations, and protection obligations. MFA, VPNs, and network security standards are technical or security controls that implement and support those requirements.

Community Discussion

No comments yet. Be the first to start the discussion!