Study for the CHRA Performance Management and Appraisal Test. Explore multiple choice questions with detailed explanations to ace your exam!

Multiple Choice

Which storage approach best protects confidentiality and complies with privacy laws?

Protecting confidentiality and complying with privacy laws requires strict access controls and auditable safeguards. The best storage approach is a secure, access-controlled system that enforces restricted permissions and aligns with privacy-law requirements. This combination ensures that only authorized individuals can view or modify sensitive data, supports least-privilege access, and provides an audit trail to demonstrate compliance and guide incident response. Encrypting a local drive helps protect data at rest but often lacks centralized policy enforcement, consistent access management, and proper auditing across devices or users. Publicly accessible cloud storage and public records in a shared folder expose data to unauthorized access and fail to meet typical privacy obligations for controlled access, monitoring, and retention. The secure, access-controlled setup addresses both confidentiality and regulatory needs in a cohesive way.

Protecting confidentiality and complying with privacy laws requires strict access controls and auditable safeguards. The best storage approach is a secure, access-controlled system that enforces restricted permissions and aligns with privacy-law requirements. This combination ensures that only authorized individuals can view or modify sensitive data, supports least-privilege access, and provides an audit trail to demonstrate compliance and guide incident response.

Encrypting a local drive helps protect data at rest but often lacks centralized policy enforcement, consistent access management, and proper auditing across devices or users. Publicly accessible cloud storage and public records in a shared folder expose data to unauthorized access and fail to meet typical privacy obligations for controlled access, monitoring, and retention. The secure, access-controlled setup addresses both confidentiality and regulatory needs in a cohesive way.