QuestionQ60

Privacy Governance

Which option is the BEST way to validate that privacy practices are aligned with the published enterprise privacy management program?

  • A Conduct an audit.
  • B Report performance metrics.
  • C Perform a control self-assessment (CSA).
  • D Conduct a benchmarking analysis.
Explanation

An audit independently evaluates evidence that privacy controls and practices conform to the enterprise’s documented privacy-management requirements. A control self-assessment is performed by the responsible staff and therefore does not provide the same independent validation; metrics and benchmarking do not directly test conformance to the organization’s program.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!