Isaca Certified in Risk and Information Systems Control CRISC Question # 37 Topic 4 Discussion
CRISC Exam Topic 4 Question 37 Discussion:
Question #: 37
Topic #: 4
Which of the following would be the GREATEST concern related to data privacy when implementing an Internet of Things (loT) solution that collects personally identifiable information (Pll)?
A.
A privacy impact assessment has not been completed.
B.
Data encryption methods apply to a subset of Pll obtained.
C.
The data privacy officer was not consulted.
D.
Insufficient access controls are used on the loT devices.
According to the CRISC Review Manual1, access controls are the policies, procedures, practices, and technologies that are designed and implemented to prevent unauthorized or inappropriate access to IT resources and data. Access controls are essential for ensuring the confidentiality, integrity, and availability of data, especially personally identifiable information (Pll), which is any information that can be used to identify, locate, or contact an individual. Insufficient access controls are the greatest concern related to data privacy when implementing an Internet of Things (loT) solution that collects Pll, as they can expose the data to various risks and threats, such asdata leakage, theft, loss, corruption, manipulation, or misuse. Insufficient access controls can also cause legal, regulatory, ethical, or reputational issues for the organization, if the data privacy rights and expectations of the individuals are violated or compromised. References = CRISC Review Manual1, page 240, 253.
Contribute your Thoughts:
Chosen Answer:
This is a voting comment (?). You can switch to a simple comment. It is better to Upvote an existing comment if you don't have anything to add.
Submit