CISSP Practice Question (Domain 2: Asset Security)

A law firm signed a contract for an offshore vendor to label 50,000 client documents for AI training, starting Monday. The documents are classified Confidential and the handling standard bars external transfer. What should the security manager do FIRST?

A. Require the vendor to sign a confidentiality agreement

B. Have the data owner rule on reclassification or a documented exception

C. Redact client identifiers before any transfer

D. Encrypt the transfer and the vendor's storage

(Explain your answer for more points in the comments!)

Come back for the answer tomorrow, or study more now!

10 comments

CISSP Practice Question (Domain 2: Asset Security)