Which measures ensure data protection in FOSSE handling customer data?

• A. Data minimization, encryption at rest, and access controls.
• B. Data minimization, encryption at rest/in transit, access controls, masking of sensitive fields, and regular security assessments.
• C. Backups, disaster recovery, and firewall policies.
• D. Two-factor authentication for all users only.

Answer: (B)

Data protection for customer data in FOSSE hinges on layered safeguards that cover the data’s lifecycle: what is collected, how it’s protected, who can access it, and how security is verified over time. Data minimization reduces the amount of data at risk by collecting only what’s necessary and retaining it only as long as needed. Encryption at rest keeps stored data unreadable if storage is compromised, while encryption in transit protects data as it moves between systems or over networks. Access controls ensure that only authorized users can view or modify data, applying the principle of least privilege. Masking sensitive fields limits exposure when data is displayed, logged, or used in non-production environments. Regular security assessments, including vulnerability testing and independent reviews, identify weaknesses and drive ongoing improvements. Together, these measures provide comprehensive protection for customer data in FOSSE.

Other options miss essential components: focusing on backups, disaster recovery, and firewall policies emphasizes availability and network boundaries rather than protecting data content; and relying solely on two-factor authentication strengthens login security but does not address data minimization, data in transit, masking, or ongoing assessments.