Certified Information Security Manager (CISM) — Question 1033

Which of the following is the BEST control to protect customer personal information that is stored in the cloud?

Answer options

• A. Strong encryption methods
• B. Appropriate data anonymization
• C. Strong physical access controls
• D. Timely deletion of digital records

Correct answer: A

Explanation

Strong encryption methods are crucial for protecting customer personal information in the cloud, as they render the data unreadable to unauthorized users. While data anonymization, physical access controls, and timely deletion are important, they do not provide the same level of security for data at rest as encryption does.