Exam CDPSE topic 1 question 31 discussion

Actual exam question from Isaca's CDPSE

Question #: 31
Topic #: 1

[All CDPSE Questions]

Which of the following scenarios poses the GREATEST risk to an organization from a privacy perspective?

A. The organization lacks a hardware disposal policy.
B. Emails are not consistently encrypted when sent internally.
C. Privacy training is carried out by a service provider.
D. The organization’s privacy policy has not been reviewed in over a year.

Show Suggested Answer

Suggested Answer: D 🗳️

by mmus at March 17, 2024, 4:06 a.m.

Comments

Submit Cancel

821bbab

8 months, 2 weeks ago

A seems cool but I am going with B (Always wear the privacy hat in CDPSE). Failing to consistently encrypt emails, even when sent internally, poses a significant privacy risk. Sensitive personal information could be exposed if the emails are intercepted, either by internal actors or through unintended breaches in the organization's network. Without encryption, data in transit is vulnerable to unauthorized access, potentially leading to a serious breach of privacy and non-compliance with data protection regulations. Example, employees salaries excel sheet sent by mistake either internally or externally is severe privacy breach.

upvoted 1 times

...