Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the concepts of security, compliance, and identityMedium
A compliance officer is reviewing the organization's adherence to regulatory requirements for data processing. They need to ensure that the organization can demonstrate that all data handling activities, from collection to deletion, are performed according to policy and legal mandates. Which security and compliance concept is most relevant here?
- AData Integrity
- BConfidentiality
- CAvailability
- DAuditability
Show answer & explanationAnswer & explanation
Correct answer: D. Auditability
Auditability refers to the ability to examine and verify records to ensure compliance with policies and regulations. For a compliance officer reviewing data handling activities against mandates, the ability to audit these actions is crucial.
Why the other options are wrong
- A. Data Integrity focuses on preventing unauthorized modification or destruction, not verifying process adherence.
- B. Confidentiality focuses on preventing unauthorized disclosure, not demonstrating adherence to processes.
- C. Availability ensures access to data, not the compliance of data handling processes.
Auditability (Compliance)
The characteristic of a system or process that allows for the examination and verification of records to ensure compliance with established policies, procedures, and regulations.
- Essential for regulatory compliance.
- Requires detailed logging and record-keeping.
- Enables tracing actions and verifying adherence to rules.
Memory trick: Compliance officer needs 'Auditability' to check the books.