Certified Cloud Security Professional (CCSP) — Question 1

Which of the following is not a component of contractual PII?

Answer options

• A. Scope of processing
• B. Value of data
• C. Location of data
• D. Use of subcontractors

Correct answer: B

Explanation

The correct answer is B, as the 'Value of data' is not typically considered a component of contractual PII. The other options, A, C, and D, directly relate to how personal identifiable information is handled and the responsibilities of parties in a contract.