ExpertHard1 markMultiple Choice
CPA · Question 31 · Area II: Security
An auditor is reviewing a client's compliance with the NIST Privacy Framework. The client has a process to 'notify individuals about how their data is collected and used'. This aligns with which Function of the NIST Privacy Framework?
An auditor is reviewing a client's compliance with the NIST Privacy Framework. The client has a process to 'notify individuals about how their data is collected and used'. This aligns with which Function of the NIST Privacy Framework?
Answer options:
A.
Control
B.
Identify
C.
Communicate
D.
Protect
How to approach this question
Map the activity (Notifying/Talking) to the Function name.
Full Answer
C.Communicate✓ Correct
C
The 'Communicate' function in the NIST Privacy Framework includes developing and implementing appropriate activities to enable organizations and individuals to have a reliable understanding and to engage in a dialogue about how data is processed.
Common mistakes
Confusing Communicate with Identify.
Practice the full CPA ISC Practice Exam 3
82 questions · hints · full answers · grading
More questions from this exam
Q01A CPA is advising a client who is migrating their legacy on-premise ERP system to a cloud-based s...MediumQ02During a review of a client's cloud governance structure, an auditor notes that the client uses a...MediumQ03An auditor is evaluating the 'Processing Integrity' principle for a financial institution's loan ...HardQ04A company uses a batch processing system to update inventory records overnight. The 'Grandfather-...HardQ05During a walkthrough of the change management process, an auditor observes that the 'Developer' r...Medium