Where can I learn all these information to get a job as a GRC I want get into it
@ebenezerboateng1895
Жыл бұрын
So if the system has a moderate categorization and is positive on the PTA. Would you select all the moderate controls as well as the privacy controls?
@ConvoCourses
Жыл бұрын
It depends on the systems. From my experience, moderate impact systems will require at least moderate level controls unless there is a need to tailor in some high level controls. As for privacy, PII is protected just like other sensitive data (i.e. its encrypted when necessary, its not left out in the open, it may need to have labels). There are PT controls that are for special situations, like web sites with PII that may need a consent popup or banner to explain that data is being collected to ensure transparency. With the PTA on the system we might not know that there is PII and the need to protect that sensitive information. Privacy is now considered throughout all control families.
Пікірлер: 3