When reviewing a third-party agreement with a cloud service provider, which of the following should be the GREATEST concern regarding customer data privacy?

The correct answer is A. Data retention, backup, and recovery. Data retention, backup, and recovery is the greatest concern for customer data privacy in a third-party CSP agreement because it directly governs how long customer data is stored, how it is protected during storage, and whether it can be recovered - all of which have direct…

Cloud Privacy Auditing

Question

Options

AData retention, backup, and recovery
BPatch management process
CReturn or destruction of information
DNetwork intrusion detection

How the community answered

(30 responses)

A
63% (19)
B
23% (7)
C
7% (2)
D
7% (2)

Explanation

Data retention, backup, and recovery is the greatest concern for customer data privacy in a third-party CSP agreement because it directly governs how long customer data is stored, how it is protected during storage, and whether it can be recovered - all of which have direct privacy implications. If a CSP retains data longer than necessary or fails to recover it properly, customer privacy is compromised. Patch management (B) and network intrusion detection (D) are operational security concerns. Return or destruction of information (C) matters but addresses the end-of-relationship scenario, whereas retention policies apply throughout the entire engagement.

Topics

#Cloud contract review#Data privacy#Data retention#Data lifecycle management

Community Discussion

No community discussion yet for this question.

Full CCAK Practice