An enterprise is planning to outsource data processing for personally identifiable information (Pll). When is the MOST appropriate time to define the requirements for security and privacy of information?

An enterprise is planning to outsource data processing for personally identifiable information (Pll). When is the MOST appropriate time to define the requirements for security and privacy of information?
A . When issuing requests for proposals (RFPs)
B . After an assessment of the current information architecture .
C . When developing service level agreements (SLAs)
D . During the initial vendor selection process

View Answer

Answer: A