I feel pretty confident about this one. The data minimization principle is all about limiting the amount of data collected and stored, right? So option C, "Data is only accessible on a need-to-know basis," is the clear winner in my opinion.
Okay, I remember now - the command to generate the dossier is "tmsh run /util get-dossier". That's the information I need to provide on the licensing portal.
Okay, I think I've got it. The key is that the organization is intentionally choosing not to implement a control, even though the risk exists. That sounds like risk acceptance to me. I'll go with D.
Sheridan
5 days agoKendra
6 days agoJustine
8 days agoHarris
13 days ago