CRISC: Certified in Risk and Information Systems Control

By Isaca · Question Mode

QuestionQ91

VerifiedRisk Response and Reporting

A risk practitioner has recently discovered that sensitive data from the production environment is needed for testing in non-production environments. Which of the following is the BEST recommendation to address this situation?

Explanation

Data masking transforms or obscures sensitive production values before they are provided to a non-production environment. This supports testing while minimizing the exposure of sensitive information outside production.

Community Discussion

No comments yet. Be the first to start the discussion!