During the migration of a company's human resources application to a PaaS provider, the Chief Privacy Officer (CPO) expresses concern the vendor's staff may be able to access data within the…

Question

Options

• AExecute non-disclosure agreements and background checks on vendor staff.
• BEnsure the platform vendor implement date-at-rest encryption on its storage.
• CEnable MFA to the vendor's tier of the architecture.
• DImpalement a CASB that tokenizes company data in transit to the migrated applications.

• A
  82% (14)
• C
  6% (1)
• D
  12% (2)

Explanation

The stated answer A is an administrative control that does not technically prevent vendor staff from reading data - it only creates legal liability after the fact. The CPO's concern is technical access, which requires a technical control. A CASB (Cloud Access Security Broker) configured to tokenize data in transit (D) replaces sensitive values with non-sensitive tokens before data ever reaches the PaaS provider's infrastructure. Even if a vendor employee has full system access, they see only meaningless tokens - the actual data never leaves the organization's control boundary.

No community discussion yet for this question.