You are the Security Administrator for an Internet Service Provider. From time to time your company gets subpoenas from attorneys and law enforcement for records of customers' access to the…

The correct answer is D. Storage and retention policies. Storage and retention policies will determine how long you keep records (such as records of customers Web activity), how you will store them, and how you will dispose of them. This will allow you to know what records you should still have on hand should a legal request for such…

Audit Fundamentals & Planning

Question

You are the Security Administrator for an Internet Service Provider. From time to time your company gets subpoenas from attorneys and law enforcement for records of customers' access to the internet. What policies must you have in place to be prepared for such requests?

Options

AGroup access policies
BBackup policies
CUser access policies
DStorage and retention policies

How the community answered

(23 responses)

A
9% (2)
B
4% (1)
C
4% (1)
D
83% (19)

Explanation

Storage and retention policies will determine how long you keep records (such as records of customers Web activity), how you will store them, and how you will dispose of them. This will allow you to know what records you should still have on hand should a legal request for such records come in. Answer: C is incorrect. User policies might determine what a customer has access to, but won't help you identify what they actually did access. Answer: A is incorrect. Group policies are usually pertinent to network administration, not the open and uncontrolled environment of an ISP. Answer: B is incorrect. Backup policies dictate how data is backed up and stored.

Topics

#data retention policy#legal compliance#storage policy#audit policies

Community Discussion

No community discussion yet for this question.

Full GSNA Practice