nerdexam
CompTIA

CAS-001 · Question #476

Executive management is asking for a new manufacturing control and workflow automation solution. This application will facilitate management of proprietary information and closely guarded corporate…

The correct answer is E. Human resources. Human Resources presents the greatest security concern. HR requires complete access to employee data stored in the manufacturing application AND automated data interchange with a third-party cloud-based SaaS application. This means sensitive employee data from a system that…

Integration of Computing, Communications and Business Disciplines

Question

Executive management is asking for a new manufacturing control and workflow automation solution. This application will facilitate management of proprietary information and closely guarded corporate trade secrets. The information security team has been a part of the department meetings and come away with the following notes:

  • Human resources would like complete access to employee data stored in

the application. They would like automated data interchange with the employee management application, a cloud-based SaaS application.

  • Sales is asking for easy order tracking to facilitate feedback to

customers.

  • Legal is asking for adequate safeguards to protect trade secrets.

They are also concerned with data ownership questions and legal jurisdiction.

  • Manufacturing is asking for ease of use. Employees working the

assembly line cannot be bothered with additional steps or overhead. System interaction needs to be quick and easy.

  • Quality assurance is concerned about managing the end product and

tracking overall performance of the product being produced. They would like read-only access to the entire workflow process for monitoring and baselining. The favored solution is a user friendly software application that would be hosted onsite. It has extensive ACL functionality, but also has readily available APIs for extensibility. It supports read- only access, kiosk automation, custom fields, and data encryption. Which of the following departments' request is in contrast to the favored solution?

Options

  • AManufacturing
  • BLegal
  • CSales
  • DQuality assurance
  • EHuman resources

How the community answered

(37 responses)
  • A
    19% (7)
  • B
    8% (3)
  • C
    3% (1)
  • D
    5% (2)
  • E
    65% (24)

Explanation

Human Resources presents the greatest security concern. HR requires complete access to employee data stored in the manufacturing application AND automated data interchange with a third-party cloud-based SaaS application. This means sensitive employee data from a system that also holds proprietary trade secrets would flow automatically to an external cloud environment. This directly conflicts with Legal's concerns about data ownership and legal jurisdiction, and creates risk around data exfiltration, unauthorized access, and compliance. The other departments' needs are manageable within the internal system: Manufacturing wants ease of use, Sales wants order tracking, and Legal's concerns are about safeguards - all of which can be addressed without external data flows. HR's requirement to sync data with an external cloud SaaS is the unique and most dangerous integration point.

Topics

#SaaS integration#cloud security#data governance#risk analysis

Community Discussion

No community discussion yet for this question.

Full CAS-001 Practice