To ensure effective management of an organization’s data privacy policy, senior leadership MUST define:

To ensure effective management of an organization’s data privacy policy, senior leadership MUST define:
A . training and testing requirements for employees handling personal data.
B . roles and responsibilities of the person with oversights.
C . metrics and outcomes recommended by external agencies.
D . the scope and responsibilities of the data owner.

View Answer

Answer: B

Explanation:

Senior leadership must define the roles and responsibilities of the person with oversight, who is responsible for ensuring compliance with the data privacy policy and applicable laws and regulations. This person may also be known as the data protection officer, the privacy officer, or the chief privacy officer, depending on the organization and jurisdiction. The person with oversight should have the

authority, resources, and independence to perform their duties effectively.

Reference: ISACA, CDPSE Review Manual 2021, Chapter 2: Privacy Governance, Section 2.1: Privacy Governance Framework, p. 35-36.

ISACA, Data Privacy Audit/Assurance Program, Control Objective 1: Data Privacy Governance, p. 4-51