Certified Information Security Manager (CISM) — Question 1157

When drafting the corporate privacy statement for a public web site, which of the following MUST be included?

Answer options

• A. Limited liability clause
• B. Access control requirements
• C. Explanation of information usage
• D. Information encryption requirements

Correct answer: C

Explanation

The correct answer is C, as a corporate privacy statement must clearly explain how user information will be utilized. Options A, B, and D are not universally required in privacy statements, making them less critical in this context.