CDPSE: Certified Data Privacy Solutions Engineer

By Isaca · Question Mode

QuestionQ45

VerifiedPrivacy Risk Management and Compliance

An organization has a policy that requires personal data to be encrypted when it is sent by email. Which of the following is the BEST control to ensure this policy is effective?

Explanation

A data loss prevention (DLP) tool can inspect outbound email for personal data and enforce the policy by blocking, quarantining, or otherwise remediating messages that do not meet encryption requirements. This provides automated control at the point of transmission, rather than relying solely on user awareness or periodic compliance activities.

Community Discussion

No comments yet. Be the first to start the discussion!