Câu 383: CISA: Certified Information Systems Auditor

Which of the following should be an IS auditor's PRIMARY consideration when evaluating the development and design of a privacy program?

1. A. Policies and procedures consistent with privacy guidelines
2. B. Industry practice and regulatory compliance guidance — đáp án hiện tại
3. C. Information security and incident management practices
4. D. Privacy training and awareness program for employees