CompTIA Advanced Security Practitioner (CASP+) CAS-004 Cert Guide

Chapter 27

The Organizational Impact of Compliance Frameworks and Legal Considerations

This chapter covers the following topics:

• Security Concerns of Integrating Diverse Industries: This section covers challenges presented when attempting to integrate organizations from vastly different industries and corporate cultures.

• Data Considerations: This section covers data sovereignty, data ownership, data classifications, data retention, data types (including health, financial, intellectual property, and personally identifiable information [PII]), and data removal, destruction, and sanitization.

• Geographic Considerations: This section covers location of data, location of data subject, and location of cloud provider.

• Third-Party Attestation of Compliance: ...