A Chief Information Security Officer (CISO) needs to create a policy set that meets international standards for data privacy and sharing. Which of the following should the CISO read and understand before writing the policies?
A) PCI DSS
B) GDPR
C) NIST
D) ISO 31000

Question

Quizplus · Accepted Answer

The General Data Protection Regulation (GDPR) is an international standard for data privacy and protection, particularly relevant for organizations handling data of EU citizens.

A Chief Information Security Officer (CISO) Needs to Create a Policy