CRISC: Certified in Risk and Information Systems ControlDemo

By Isaca · Question Mode

QuestionQ299

Risk Assessment

Which of the following should be considered FIRST to reduce the risk associated with storing personal data?

  • A Normalize the personal data.
  • B Implement privacy training.
  • C Minimize the collection of data.
  • D Encrypt the personal data.
Explanation

Data minimization reduces privacy and security risk at the source by limiting personal data collection to what is necessary. A smaller stored dataset lowers the potential exposure and harm from unauthorized access, loss, or misuse.

Community Discussion

No comments yet. Be the first to start the discussion!