You are examining a customer’s IT process maturity as it relates to security. You find that the
customer has privacy statements on their websites. It appears that only manual processes support
these privacy statements. Which process change do you recommend that provides support for the
customer’s privacy statement?

A.
They need to back up their privacy statements with purpose-based, fine-grained authorization
at a data level.

B.
They need to address encryption of data, in order to keep it private, both while stored on disk
and while in transit.

C.
They need to back up their privacy statements with server and desktop compliance tools to
ensure they meet their privacy goals.

D.
They do not need to make a change since they are making statements to their customers
regarding their position regarding privacy.