Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
ISACA Certified in Risk and Information Systems Control · Isaca
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
B. Governs all other options and its enforced. Research suggests: CISA Review Manual, 27th Edition, page 2301 CISA Review Questions, Answers & Explanations Database - 12 Month Subscription2 but I have no access to this material to confirm.
B. Enforce an internal data access policy: This is directly relevant to controlling access to confidential information. Enforcing an internal data access policy ensures that only authorized personnel have access to sensitive information, based on their role and need-to-know basis. This policy would include mechanisms like access controls, user authentication, and authorization levels, which are essential to safeguard confidential data.
B. Enforce an internal data access policy Enforcing an internal data access policy is crucial in controlling who can access what information within a business application system. This policy should define the roles and responsibilities of users, specify what data they are allowed to access based on their role, and establish protocols for granting, reviewing, and revoking access rights. Such a policy is central to maintaining the confidentiality of information by ensuring that only authorized individuals have access to sensitive data.