Câu 153: IIA-CIA-PART3: Certified Internal Auditor - Part 3 Business Analysis and Information Technology

Which of the following data security policies is most likely to be the result of a data privacy law?

1. A. Access to personally identifiable information is limited to those who need it to perform their job. — đáp án hiện tại
2. B. Confidential data must be backed up and recoverable within a 24-hour period.
3. C. Updates to systems containing sensitive data must be approved before being moved to production.
4. D. A record of employees with access to insider information must be maintained, and those employees may not trade company stock during blackout periods.