Q: 12
What is the best way to understand the location, use and importance of personal data within an
organization?
Options
Discussion
I don't think testing security (B) or just evaluating collection methods (C) tell you the whole story. Data inventory analysis (A) is actually where you see everything mapped out. C is tempting but more a trap here.
C , sounds like evaluating collection methods could reveal usage and importance too, A is tempting though.
A , since a data inventory actually lists types, locations, and uses of personal data. The others might help, but none give that complete structured view. Maybe some overlap but A is the one auditors and DPOs always look for.
A makes the most sense here. Analyzing the data inventory gives you the full picture of what data is held, where, and why. Testing security or just talking to staff doesn't cover everything. Pretty sure it's A but open for debate.
Probably A, seen a similar question in practice and inventory analysis is always the go-to.
Be respectful. No spam.