CISM Question 368

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• Chose B1

  B. regulatory compliance

• 1

  Its D Define, assess and classify PII your organization receives, stores, manages, or transfers. For each type of PII, identify: The required level of confidentiality How sensitive the data is to integrity—what happens if it is lost or corrupted How important it is to have the data available at all times What level of consent has the organization received in relation to the data

• Chose B2

  B. regulatory compliance