フリー問題

問題文

A hospital plans to move patient records to a cloud service. The provider's standard terms allow it to replicate data to any region it operates in, for resilience. What should the auditor require before the move is approved?

選択肢

1. A contractual limit on the backup times together with evidence that the platform configuration enforces it, because chosen currency determines which legal regime applies to the records.
2. A contractual limit on the storage regions together with evidence that the platform configuration enforces it, because physical location determines which legal regime applies to the records.
3. A contractual limit on the storage regions together with evidence that the marketing brochure enforces it, because chosen currency determines which legal regime applies to the records.
4. A contractual limit on the backup times together with evidence that the marketing brochure enforces it, because physical location determines which legal regime applies to the records.