Which of these is not part of the security program required by DATA to prevent c

Question

Which of these is not part of the security program required by DATA to prevent compromise of critical information?

Multiple Choice

Develop, document and maintain a security policy for the collection, use, sale, dissemination, and maintenance of personal identifying information

Establish contracts with third parties with access to the information to establish controls that meet the requirements of the Act

Establish a process to identify risks and vulnerabilities of potential breaches and implement administrative and technical controls to mitigate the risk of compromise of the personal identifying information

Develop a procedure to efficiently and effectively notify affected parties and regulators in the event of a data breach.

Explanation / Answer

Develop a procedure to efficiently and effectively notify affected parties and regulators in the event of a data breach is not part of the security program required by DATA to prevent compromise of critical information. Such security program always aim at reducing the risk of compromise of critical information to minimal. Option 4 is correct

Related Questions

Navigate

• Browse (All)
• Browse W
• Subjects

Integrity-first tutoring: explanations and feedback only — we do not complete graded work. Learn more.