Mаnаgement оf Crаwfish Cоrpоration is applying data management controls to ensure the confidentiality of sensitive information and the privacy of personally identifiable information (PII) in the organization. Select from the option list provided the data management control and data loss prevention (DLP) practice that best fit each description below. Each choice may be used once, more than once, or not at all. Description Control DLP Practice Review and update documentation annually or as significant organizational changes occur that impact the process. Management should ensure data disposal methods are commensurate with data sensitivity. Based on a user’s need to know, management should apply access control lists to local and remote file systems, databases, and applications. Encrypt data on servers, applications, and databases. Conduct an annual cataloging of sensitive data. It may use labels such as “sensitive,” “confidential,” and “public” to classify data accordingly. Addresses data sensitivity, data owners, handling of data, data retention, and disposal requirements, based on sensitivity and retention standards for the organization. Encrypt data in transit on portable media.
Which оf the fоllоwing frаmeworks is а regulаtion?