IIA
IIA-CIA-PART3 · Question #10
An organization decided to outsource its human resources function. As part of its process migration, the organization is implementing controls over sensitive employee data. What would be the most…
The correct answer is B. Include a data protection clause in the contract with the service provider. See the full explanation below for the reasoning.
Question
An organization decided to outsource its human resources function. As part of its process migration, the organization is implementing controls over sensitive employee data. What would be the most appropriate directive control in this area?
Options
- ARequire a Service Organization Controls (SOC) report from the service provider
- BInclude a data protection clause in the contract with the service provider.
- CObtain a nondisclosure agreement from each employee at the service provider who will handle
- DEncrypt the employees ' data before transmitting it to the service provider
How the community answered
(59 responses)- A3% (2)
- B76% (45)
- C7% (4)
- D14% (8)
Community Discussion
No community discussion yet for this question.