Which of the following is the MAIN reason to follow a formal risk management process in an organization that hosts and uses privately identifiable information (PII) as part of their business models and processes?

A. Need to comply with breach disclosure laws

B. Fiduciary responsibility to safeguard credit information

C. Need to transfer the risk associated with hosting PII data

D. Need to better understand the risk associated with using PII data








 

Suggested Answer: D





This question is in 712-50 Certified CISO (CCISO) Exam
For getting Certified CISO (CCISO)







Disclaimers:
The website is not related to, affiliated with, endorsed or authorized by EC-Council. 
Trademarks, certification & product names are used for reference only and belong to EC-Council.
The website does not contain actual questions and answers from EC-Council's Certification Exams.