Câu 421: Isaca Certified in Risk and Information Systems Control

An organization is implementing encryption for data at rest to reduce the risk associated with unauthorized access. Which of the following MUST be considered to assess the residual risk?

1. A. Data destruction requirements
2. B. Cloud storage architecture
3. C. Data retention requirements
4. D. Key management — đáp án hiện tại