MENU
A health tech enterprise wants to ensure that its in-house developed mobile app for users complies with data privacy regulations. Which of the following should be identified FIRST when creating an inventory of information systems and data related to the mobile app?
Suggested Answer: D
Get Premium CGEIT Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
14 comments · newest first
AN
Anabel
11 months ago
Not sure if that's the best first step, honestly.
CA
Caren
12 months ago
Totally agree, data owners are key!
LY
Lyla
12 months ago
Surprised this isn't more straightforward!
JE
Jerry
12 months ago
I think vendors and outsourced systems should come first.
TE
Terry
1 year ago
Definitely need to start with application and data owners.
KA
Kati
1 year ago
I lean towards identifying the application and data owners first. They have the most insight into compliance needs, don’t they?
LA
Lashawnda
1 year ago
I practiced a question similar to this, and I feel like understanding the information classification scheme is crucial. But is it the first step?
VE
Veronique
1 year ago
I'm not entirely sure, but I remember something about vendors being important too. Maybe we should consider them first?
TE
Terry
1 year ago
I think we should start with identifying the application and data owners first. They know what data is being used, right?
DA
Dante
1 year ago
Hmm, let me think about this. I know revenue recognition is important, but I'm not totally sure which fields are used in the trigger hierarchy. I'll have to review my notes on that.
HA
Hailey
1 year ago
This seems like a straightforward question about site survey considerations for an outdoor bridge. I'm pretty confident I can identify the two correct criteria.
DE
Denise
1 year ago
This question seems straightforward, I think I can handle it.
TW
Twana
1 year ago
The Wavelength Routing report sounds like the right choice here. That's where I'd expect to find that kind of wavelength information.
ER
Erick
1 year ago
Option C looks promising to me. Encrypting the ID values with the service consumer's private key seems like a clever way to avoid the information leakage issue while still maintaining unique IDs.