An organization decided to outsource its human resources function. As part of its process migration, the organization is implementing controls over sensitive employee data.
What would be the most appropriate directive control in this area?

Question

An organization decided to outsource its human resources function. As part of its process migration, the organization is implementing controls over sensitive employee data.

What would be the most appropriate directive control in this area?

Brent Kehoe · Accepted Answer

Include a data protection clause in the contract with the service provider.

Brent Kehoe · Answer

Require a Service Organization Controls (SOC) report from the service provider

Brent Kehoe · Answer

Obtain a nondisclosure agreement from each employee at the service provider who will handle sensitive data.

Brent Kehoe · Answer

Encrypt the employees ' data before transmitting it to the service provider

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 10 - IIA-CIA-Part3 discussion

Suggested answer: B

0 comments