A.Detailed lists of required policies and procedures

B.PCI environment scoping

C.Framework for an overall security and compliance program

D.Information handling recommendations

A.Explicit requirements for all regulations

B.Compliance with ISO 27002 is sufficient to comply with all regulations

C.A structured program that helps with security and compliance

A.Purpose limitation, pudicity, transparency, data minimisation

B.Purpose limitation, proportionality, availability, data minimisation

C.Purpose limitation, proportionality, data minimisation, transparency

D.Target group, proportionality, transparency, data minimisation

A.When an organization is compliant, it meets the requirements of privacy legislation and, in doing so, protects the reliability of its information.

B.Compliance is another word for reliability. So, if a company indicates that it is compliant, it means that the information is managed properly.

C.When an organization employs a standard such as the ISO/IEC 27002 and uses it everywhere, it is compliant and therefore it guarantees the reliability of its information.

D.By meeting the legislative requirements and the regulations of both the government and internal management, an organization shows that it manages its information in a sound manner.

A.True

B.False