XYZ bank has recently decided to start offering online banking services. For doing so, the bank has outsourced its IT operations and processes to various third parties. Acknowledging privacy concerns, bank has decided to implement a privacy program.
Assuming you have been tasked to deploy this framework for the bank, which of the following would most likely be your first step?
A . Create an inventory of business processes that deal with personal information and identify the associated data element.
B . Ensure that bank is equipped to test the relevance of each legal and compliance requirement in its environment.
C . Assign privacy roles and responsibilities for process owners.
D . Any of the above as order is irrelevant.
Answer: A