CISSP Practice Question (Domain 1: Security and Risk Management)
A retailer's marketing team wants 200,000 prospect emails from a data broker for next week's launch. The prospects fall under several privacy regimes and nobody knows how consent was obtained. What should the security manager do FIRST?
A. Require a data processing agreement from the broker
B. Have legal confirm a lawful basis for using the list
C. Review the broker's security certifications and audits
D. Add an opt-out link to every campaign message
(Explain your answer for more points in the comments!)
Come back for the answer tomorrow, or study more now!
3
12 comments
Vincent Primiani
7
CISSP Practice Question (Domain 1: Security and Risk Management)
CISSP Study Group
skool.com/cybersecurity-study-group
Share resources, get advice, and connect with peers studying cybersecurity. Join our CISSP study group and connect with fellow professionals today!
Leaderboard (30-day)
Powered by