Which combination of privacy and security controls is important for an Address Management System?

Which combination of privacy and security controls is important for an Address Management System?

• A. RBAC
• B. Data masking for logs and encryption at rest/in transit
• C. RBAC, data masking for logs, encryption at rest/in transit, audit trails, data minimization, and per-tenant data isolation
• D. No specific controls

Answer: (D)

Protecting an Address Management System requires a layered approach to privacy and security. Implementing RBAC ensures that only the right people have access to address data, enforcing least privilege. Data masking for logs prevents exposing sensitive fields in log files, which are often stored longer and may be less protected. Encrypting data at rest and in transit guards information even if storage media are compromised or network channels are intercepted. Maintaining audit trails provides a clear record of who accessed or changed data, supporting accountability and incident response. Data minimization reduces the amount of personal information stored and processed, lowering risk. Per-tenant data isolation is essential in multi-tenant setups to prevent cross-tenant data access. Together, these controls create a strong privacy and security posture for the system. A stance that suggests no specific controls are needed would leave data exposed and fail to meet common security and privacy expectations.