CGEIT: Certified in the Governance of Enterprise ITDemo

By Isaca · Question Mode

QuestionQ345

Risk Optimization

To reduce the risk that customer personal information is mishandled in a system located in a country with stringent privacy regulations, which of the following is the BEST action to take?

  • A Establish new IT key risk indicators (KRIs).
  • B Revise the IT strategic plan.
  • C Implement data loss prevention (DLP).
  • D Update the information architecture.
Explanation

Data loss prevention (DLP) helps identify sensitive personal information and enforce controls over its use and movement, reducing the risk of unauthorized disclosure or exfiltration. It directly addresses potential mishandling of customer personal data.

Community Discussion

No comments yet. Be the first to start the discussion!