MENU
Which of the following should be done FIRST when establishing security measures for personal data stored and processed on a human resources....system?
Suggested Answer: D
Get Premium CISM Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
11 comments · newest first
AL
Alisha
11 months ago
A PIA is important, but it feels like it comes later in the process.
MI
Mica
12 months ago
A separate network sounds good, but is it really the first step?
CH
Cherry
12 months ago
Wait, shouldn't we evaluate encryption tech before anything else?
FR
Frederica
12 months ago
Definitely agree with that! You need to know your weaknesses.
TA
Tawny
1 year ago
I think conducting a vulnerability assessment is key first.
DE
Delbert
1 year ago
I feel like moving the system to a separate network might be a good idea, but it seems more like a later step after assessing risks.
RA
Ranee
1 year ago
I'm not entirely sure, but I remember something about vulnerability assessments being crucial for understanding existing weaknesses.
TE
Tennie
1 year ago
I think the first step should be conducting a privacy impact assessment. It helps identify risks before implementing other measures.
AL
Alesia
1 year ago
I practiced a similar question, and I think evaluating encryption technologies comes after understanding the data's sensitivity and risks.
VI
Vicente
1 year ago
This seems like a straightforward Windows administration question, but I want to make sure I understand the nuances of the PowerShell cmdlet and parameters. I'll review my notes and try to eliminate the incorrect options.
RO
Roslyn
1 year ago
I'm feeling pretty confident about this one. I think option B, using separate publication lists within a single account, is the way to go. It's a simple and straightforward solution that should meet the requirements.