With which of the following departments should an engineer for a consulting firm coordinate when determining the control and reporting requirements for storage of sensitive, proprietary customer information?
A. Human resources
B. Financial
C. Sales
D. Legal counsel
How to PASS CAS-004 in First Attempt?FULL Printable PDF and Software. VALID exam to help you PASS. |
 |
The question is about the *control and reporting requirements* of said data which seems to me would fall under legal counsel as they would be aware of what laws and standards would govern how the customer data should be stored.
I agree D also. Think about it, what happens if the data is leaked or stolen, HR, Sales, and Finance would all be covered by the Legal Department.
The question was referring to “storage of sensitive, proprietary customer information”. Hence to simplify the term
HR – Employee records
Finance – Financial records
Sales – Customer records
Legal – Legal records
The question is basically refer to manage data ownership and in this case who should i refer to. The key word was “Customer information” I believe the answer should be C. Sales as they will know what customer data can be reveal and what can’t be reveal.
Legal comes into play when it comes to privacy concern or like you said when there is a data breach. Until then it should be by the Sales department.
I think this one is C. I think the key word here is “proprietary,” meaning that only customer information stored by the company is at risk. If we were dealing with PCI or PHI or privacy, maybe legal would need to be involved then, but the question never specifies the level of customer information except that it is proprietary. Thus, I think Sales would be a better option as it directly relates to the customer’s information .
Human resources data includes private information regarding all of an organization’s personnel.
When determining the storage of sensitive data as it relates to customers, I think legal counsel would be more appropriate. If the data were to be compromised, then it would then become a legal matter.
Human resources should only be dealing with the organization’s personnel like you mentioned.
i agree D is more correct