An analyst has been asked to provide feedback regarding the controls required by a revised regulatory framework. At this time, the analyst only needs to focus on the technical controls. Which of the following should the analyst provide an assessment of?
A) Tokenization of sensitive data
B) Establishment of data classifications
C) Reporting on data retention and purging activities
D) Formal identification of data ownership
E) Execution of NDAs

Question

Quizplus · Accepted Answer

Tokenization of sensitive data is a technical control that involves replacing sensitive data with non-sensitive equivalents, which is relevant to the analyst's focus on technical controls.

An Analyst Has Been Asked to Provide Feedback Regarding the Controls