Asset Security
Question #183
A healthcare provider is in the process of migrating sensitive patient records to a new Electronic Health Record (EHR) system. To ensure compliance with asset ownership and data management standards throughout this migration, which of the following actions BEST supports proper data stewardship and accountability?
A. Establish a central log of all user access to the EHR system.
B. Assign a data custodian to each department.
C. Allow unrestricted data access to department heads for efficiency.
D. Encrypt all internal and external communications related to records.
Domain Concept: Asset Security
This scenario evaluates management-level decision making in Asset Security. In CISSP exam scenarios, evaluate answers through executive governance, risk assessment, life safety, and due diligence before implementing technical controls.
💡 View the Answer & Detailed Explanation
The correct answer to this scenario-based question requires an understanding of the CISSP Managerial Mindset. Register to view our in-depth explanation and access 1100+ adaptive questions completely free.