QuestionQ85

VerifiedPrivacy Risk Management and Compliance

Which of the following should be considered FIRST before implementing an audit trail for access to personal data?

Explanation

The sensitivity of personal data and applicable regulatory requirements establish the mandatory scope and controls for access auditing, including which events must be recorded, how long logs must be retained, and how they must be protected.

Community Discussion

No comments yet. Be the first to start the discussion!