Free Preparation Discussions
MENU
Isaca Cybersecurity-Audit-Certificate Exam - Topic 3 Question 49 Discussion
Topic #: 3
A cloud service provider is used to perform analytics on an organization's sensitive dat
a. A data leakage incident occurs in the service providers network from a regulatory perspective, who is responsible for the data breach?
A cloud service provider is used to perform analytics on an organization's sensitive data. A data leakage incident occurs in the service provider's network. From a regulatory perspective, the organization is responsible for the data breach. This is because the organization is the data owner and has the ultimate accountability and liability for the security and privacy of its data, regardless of where it is stored or processed. The organization cannot transfer or delegate its responsibility to the service provider, even if there is a contractual agreement or service level agreement that specifies the security obligations of the service provider. The other options are not correct, because they either imply that the service provider is responsible (A), or that the responsibility depends on the nature of breach (B) or specific regulatory requirements C, which are not relevant factors.
Amina
1 day agoCherri
6 days agoRosendo
11 days agoBen
17 days agoMariko
22 days agoElenore
27 days agoLeonor
2 months agoAvery
2 months agoDion
2 months agoGlory
2 months agoLashanda
2 months agoKris
2 months agoJustine
3 months agoNancey
3 months agoVeronique
3 months agoDaisy
3 months agoSolange
3 months agoGlenna
3 months ago