Analyze Organizational and Operational Environment ISSEP Practice Questions (Page 8)

Questions 36–36

1. 36expert · hard

   A financial services firm is designing a new customer-facing application. The marketing department requires that the application be accessible from any web browser without additional plugins. The security team requires that all customer data be encrypted in transit and at rest. The development team notes that implementing end-to-end encryption for all data will increase latency and may affect the user experience. The compliance officer adds that the firm must retain audit logs for seven years. The project is on a tight schedule. What is the most appropriate approach to reconcile these competing requirements?

   • ADefer the audit log retention requirement until after the system is operational, to avoid impacting the schedule.
   • BImplement a less secure encryption algorithm to reduce latency, and document the decision as a risk acceptance.
   • CAsk the marketing department to relax the browser compatibility requirement to allow for a custom plugin that improves performance.
   • DPrioritize the security and compliance requirements, and document the performance impact as a trade-off to be accepted by the stakeholders.
   Reveal Solution Discussion Select an answer first