フリー問題

問題文

An organization keeps two bodies of records: customer profiles that name the people they describe, and equipment telemetry that names nobody. The audit team has to decide which body of requirements governs the handling of the customer profiles. Which answer is right, and why?

選択肢

1. The security side of the requirements, because the deciding fact is that a living individual can be singled out from the records
2. The security side of the requirements, because the deciding fact is that the records sit on hardware the organization owns for itself
3. The privacy side of the requirements, because the deciding fact is that the records sit on hardware the organization owns for itself
4. The privacy side of the requirements, because the deciding fact is that a living individual can be singled out from the records