ExamGecko
Question list
Search
Search

Question 386 - CISM discussion

Report
Export

When implementing a security policy for an organization handling personally identifiable information (Pll); the MOST important objective should be:

A.
strong encryption
Answers
A.
strong encryption
B.
regulatory compliance.
Answers
B.
regulatory compliance.
C.
data availability.
Answers
C.
data availability.
D.
security awareness training
Answers
D.
security awareness training
Suggested answer: B

Explanation:

Regulatory compliance is the most important objective when implementing a security policy for an organization handling personally identifiable information (PII) because it helps to ensure that the organization meets the legal and ethical obligations to protect the privacy and security of PII. PII is any information that can be used to identify, contact, or locate an individual, such as name, address, email, phone number, social security number, etc. PII is subject to various laws and regulations in different jurisdictions, such as the General Data Protection Regulation (GDPR) in the European Union, the California Consumer Privacy Act (CCPA) in the United States, or the Personal Information Protection and Electronic Documents Act (PIPEDA) in Canada. Failing to comply with these regulations can result in fines, lawsuits, reputational damage, or loss of trust. Therefore, regulatory compliance is the correct answer.

https://www.iso.org/obp/ui/en/#iso:std:iso-iec:27018:ed-2:v1:en

https://www.digitalguardian.com/blog/how-secure-personally-identifiable-information-against-loss-or-compromise

https://blog.rsisecurity.com/how-to-make-a-personally-identifiable-information-policy/

asked 01/10/2024
Nogueira Elder
39 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first