Which of the following is MOST important for an IS auditor to examine when reviewing an organization’s privacy policy?

Which of the following is MOST important for an IS auditor to examine when reviewing an organization’s privacy policy?
A . Whether there is explicit permission from regulators to collect personal data
B. The organization’s legitimate purpose for collecting personal data
C. Whether sharing of personal information with third-party service providers is prohibited
D. The encryption mechanism selected by the organization for protecting personal data

View Answer

Answer: B