When configuring information systems for the communication and transport of personal data, an organization should:

When configuring information systems for the communication and transport of personal data, an organization should:
A . adopt the default vendor specifications.
B . review configuration settings for compliance.
C . implement the least restrictive mode.
D . enable essential capabilities only.

View Answer

Answer: B

Explanation:

Reference: https://www.vonage.com/resources/articles/gdpr-means-customer-communications/ When configuring information systems for the communication and transport of personal data, an organization should review configuration settings for compliance with privacy regulations and standards. This means that the organization should ensure that the configuration settings are aligned with the privacy principles and requirements that apply to the data being communicated or transported, such as data minimization, purpose limitation, consent, encryption, pseudonymization, anonymization, etc. The organization should also document and monitor the configuration settings and perform regular audits and reviews to verify their effectiveness and compliance.

Reference: CDPSE Review Manual (Digital Version), page 151