CDPSE · Question #287
Which of the following is MOST useful for understanding an organization's approach towards privacy compliance?
The correct answer is D. Privacy audit reports. Privacy audit reports provide evidence of how privacy controls are actually operating in practice, not just what is intended. They document compliance gaps, remediation actions, control effectiveness, and the organization's real posture against applicable privacy requirements…
Question
Which of the following is MOST useful for understanding an organization’s approach towards privacy compliance?
Options
- AData classifications
- BData privacy policies
- CPrivacy awareness training
- DPrivacy audit reports
How the community answered
(21 responses)- A10% (2)
- B5% (1)
- C5% (1)
- D81% (17)
Explanation
Privacy audit reports provide evidence of how privacy controls are actually operating in practice, not just what is intended. They document compliance gaps, remediation actions, control effectiveness, and the organization's real posture against applicable privacy requirements. Policies (B) communicate intent but do not demonstrate execution. Data classifications (A) organize data types but do not reveal compliance posture. Awareness training (C) reflects education efforts but not actual organizational compliance behavior. Audit reports are the most authoritative source for understanding whether privacy commitments are being met.
Topics
Community Discussion
No community discussion yet for this question.