nerdexam
CompTIA

CAS-005 · Question #244

A security officer performs due diligence activities before implementing a third-party solution into the enterprise environment. The security officer needs evidence from the third party that a data su

The correct answer is C. Privacy regulations. Privacy regulations, such as GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act), require companies to provide data subject access request (DSAR) handling processes. A DSAR allows individuals to request details about their personal data stored by

Submitted by klara.se· Mar 6, 2026Governance, Risk, and Compliance

Question

A security officer performs due diligence activities before implementing a third-party solution into the enterprise environment. The security officer needs evidence from the third party that a data subject access request handling process is in place. Which of the following is the security officer most likely seeking to maintain compliance?

Options

  • AInformation security standards
  • BE-discovery requirements
  • CPrivacy regulations
  • DCertification requirements
  • EReporting frameworks

How the community answered

(29 responses)
  • A
    3% (1)
  • C
    90% (26)
  • D
    7% (2)

Explanation

Privacy regulations, such as GDPR (General Data Protection Regulation) and CCPA (California Consumer Privacy Act), require companies to provide data subject access request (DSAR) handling processes. A DSAR allows individuals to request details about their personal data stored by a company and request modifications or deletions.

Community Discussion

No community discussion yet for this question.

Full CAS-005 Practice