Question

A privacy engineer at a fast-growing fintech company established a data inventory 18 months ago as a one-time project. Since then, the company launched three new mobile products, acquired a competitor, and migrated several systems to the cloud. During a recent regulatory inquiry, the company could not accurately identify all systems processing customer financial data. Which action would MOST effectively prevent this problem from recurring?

Accepted Answer

Establish a process that automatically updates the data inventory whenever change-management, procurement, and system-onboarding events occur

Answer

Schedule a comprehensive manual re-inventory of all systems every three years to capture accumulated changes

Answer

Encrypt all databases containing customer financial data so their contents are protected during inquiries

Answer

Require each business unit to sign an annual attestation confirming they have not acquired any new systems