Certified in Risk and Information Systems Control (CRISC) — Question 877

An organization is participating in an industry benchmarking study that involves providing customer transaction records for analysis. Which of the following is the
MOST important control to ensure the privacy of customer information?

Answer options

• A. Data anonymization
• B. Data cleansing
• C. Data encryption
• D. Nondisclosure agreements (NDAs)

Correct answer: A

Explanation

Data anonymization is essential in this scenario because it removes identifiable information from customer records, ensuring that individuals cannot be traced back to the data shared. While data cleansing improves data quality, data encryption secures data in transit or storage, and NDAs protect confidentiality, they do not specifically address the need to anonymize customer information before sharing it in a benchmarking context.