Which of the following MUST system and database administrators be aware of and apply when
configuring systems used for storing personal employee data?

A.
Secondary use of the data by business users

B.
The organization’s security policies and standards

C.
The business purpose for which the data is to be used

D.
The overall protection of corporate resources and data