Dan is the Chief Information Officer for Humphrey Company, and he is reviewing security-related policies for the organization. Humphrey Company collects a wide array of data from its customers and understands the importance of it. Which of the following is an example of an inappropriate policy or practice in the context of the three principles of proper data usage?
A) Allowing customers to create their own unique login where they can access their account information including their past orders and sensitive personal and credit card information
B) Selling a customer list from the company database for customers that signed a waiver when they came aboard
C) Selling an email distribution list to an outside company for a fair price without users' prior permission
D) Sharing customer spending trends from the current year with company shareholders

Question

Quizplus · Accepted Answer

This question requires familiarity with the three broad principle of proper data usage and how they guide decision makers' treatment of sensitive data. Choice C is correct because it is a policy that does not strive to protect the integrity of the company's data. The remaining choices are incorrect because they are appropriate policies and practices for security purposes and do adhere to the three broad principles of proper data usage.

Dan Is the Chief Information Officer for Humphrey Company, and He