CISM · Question #131
Which of the following is the BEST control to protect customer personal information that is stored in the cloud?
The correct answer is A. Strong encryption methods. Encryption is the most effective control for cloud-stored personal data because it protects the data itself regardless of whether other controls fail. Even if an attacker gains unauthorized logical access or a cloud misconfiguration exposes storage, encrypted data remains unreada
Question
Which of the following is the BEST control to protect customer personal information that is stored in the cloud?
Options
- AStrong encryption methods
- BAppropriate data anonymization
- CStrong physical access controls
- DTimely deletion of digital records
How the community answered
(36 responses)- A69% (25)
- B3% (1)
- C19% (7)
- D8% (3)
Explanation
Encryption is the most effective control for cloud-stored personal data because it protects the data itself regardless of whether other controls fail. Even if an attacker gains unauthorized logical access or a cloud misconfiguration exposes storage, encrypted data remains unreadable without the key. Anonymization (B) alters or destroys data utility and may not be reversible, making it unsuitable for active customer records. Physical access controls (C) are the cloud provider's responsibility, not the customer's, and don't protect against logical threats. Timely deletion (D) only applies to data that no longer needs to be retained and offers no protection for data that must remain active.
Topics
Community Discussion
No community discussion yet for this question.