nerdexam
Isaca

CDPSE · Question #105

An organization is considering the use of remote employee monitoring software. Which of the following is the MOST important privacy consideration when implementing this solution?

The correct answer is C. Data access should be restricted based on roles. Restricting data access based on roles is the most critical privacy control because it ensures that sensitive monitoring data about employees is only accessible to individuals with a legitimate business need. Unrestricted access to monitoring data poses a high privacy risk and…

Privacy Architecture

Question

An organization is considering the use of remote employee monitoring software. Which of the following is the MOST important privacy consideration when implementing this solution?

Options

  • AData should be used to improve employee performance.
  • BData should be retained per the organization's retention policy
  • CData access should be restricted based on roles.
  • DData analysis should be used to set staffing levels

How the community answered

(43 responses)
  • A
    2% (1)
  • B
    14% (6)
  • C
    77% (33)
  • D
    7% (3)

Explanation

Restricting data access based on roles is the most critical privacy control because it ensures that sensitive monitoring data about employees is only accessible to individuals with a legitimate business need. Unrestricted access to monitoring data poses a high privacy risk and can lead to misuse, discrimination, or regulatory violations. While using data to improve performance (A), following retention policies (B), and informing staffing decisions (D) are valid secondary considerations, they are purposes/processes - not foundational privacy safeguards. Access control is the foundational control that prevents misuse of the collected data.

Topics

#Data Access Control#Employee Privacy#Least Privilege#Privacy by Design

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice