Câu 259: Isaca Certified in Risk and Information Systems Control

A highly regulated organization acquired a medical technology startup company that processes sensitive personal information with weak data protection controls. Which of the following is the BEST way for the acquiring company to reduce its risk while still enabling the flexibility needed by the startup company?

1. A. Implement a firewall and isolate the environment from the parent company's network.
2. B. Classify and protect the data according to the parent company's internal standards.
3. C. Have the data privacy officer review the startup company's data protection policies. — đáp án hiện tại
4. D. Identify previous data breaches using the startup company's audit reports.