nerdexam
Isaca

CDPSE · Question #184

What should be the PRIMARY consideration of a multinational organization deploying a user and entity behavior analytics (UEBA) tool to centralize the monitoring of anomalous employee behavior?

The correct answer is A. Cross-border data transfer. UEBA tools collect and analyze behavioral data about employees, which constitutes personal data under most privacy frameworks. When a multinational organization centralizes this monitoring, employee data from various countries is transferred to a central location. This triggers c

Privacy Governance

Question

What should be the PRIMARY consideration of a multinational organization deploying a user and entity behavior analytics (UEBA) tool to centralize the monitoring of anomalous employee behavior?

Options

  • ACross-border data transfer
  • BSupport staff availability and skill set
  • CUser notification
  • DGlobal public interest

How the community answered

(25 responses)
  • A
    60% (15)
  • B
    12% (3)
  • C
    24% (6)
  • D
    4% (1)

Explanation

UEBA tools collect and analyze behavioral data about employees, which constitutes personal data under most privacy frameworks. When a multinational organization centralizes this monitoring, employee data from various countries is transferred to a central location. This triggers cross-border data transfer requirements under regulations such as the GDPR, which restricts transfers of personal data outside the EEA unless adequate safeguards exist. This must be the primary consideration because it determines the legal permissibility of the entire deployment. Staff availability, user notification, and public interest are secondary concerns that only arise if the cross-border transfer is legally viable.

Topics

#Cross-border data transfer#Global privacy compliance#Employee monitoring privacy#International data transfers

Community Discussion

No community discussion yet for this question.

Full CDPSE Practice