Certbie
Question 1 of 30
\"CloudSecure,\" a cloud service provider based in Estonia, is seeking ISO 29100:2011 certification to demonstrate its commitment to privacy and data protection. As the lead implementer, you are tasked with establishing a privacy framework that aligns with the standard\'s requirements. CloudSecure collects and processes a wide range of Personally Identifiable Information (PII), including user profiles, financial data, and health records, from clients across the European Union and the United States. The company aims to build trust with its customers and ensure compliance with GDPR and other relevant privacy regulations. To establish a robust privacy framework, which of the following should be the primary focus, according to ISO 29100:2011?
Establishing a comprehensive framework for protecting Personally Identifiable Information (PII) within the organization's ICT systems, aligning with privacy principles, and ensuring compliance with relevant privacy laws and regulations such as GDPR.
Implementing advanced encryption technologies and cybersecurity measures to prevent unauthorized access to PII, focusing primarily on technical controls and data breach prevention.
Developing a detailed incident response plan to address potential data breaches, emphasizing rapid detection, containment, and notification procedures.
Conducting regular security audits and penetration testing to identify vulnerabilities in the organization's infrastructure, with a focus on technical security assessments.