Exam CISA All QuestionsBrowse all questions from this exam
Question 968

Which of the following is the BEST way for an organization that is using a Software as a Service (SaaS) application to reduce its risk associated with the collection and protection of personal information?

    Correct Answer: C

    The best way for an organization using a Software as a Service (SaaS) application to reduce its risk associated with the collection and protection of personal information is to limit the amount of personal information collected to the minimum required. By collecting only the necessary data, the organization minimizes the amount of sensitive information it needs to protect, thereby reducing the risk and potential impact of data breaches or unauthorized access.

Discussion
FAGFUROption: C

By minimizing the amount of personal information stored or processed, the organization can reduce the potential impact in case of a security breach or unauthorized access.

SwallowsOption: B

Encrypting personal information adds an extra layer of security, ensuring that even if unauthorized access occurs, the data remains protected and unreadable without the proper decryption keys.