Identify the data-minimization and access-control failures in a prototype workflow before customer data leaves the governed environment.
The demo is temporary. The customer data risk is not. Where is the clearest responsible-data-use failure? Raw customer chat bundle Correct. Raw identifiable logs are excessive for a sentiment demo; minimize, redact, aggregate, or use synthetic data before any sandbox upload. Vendor sandbox laptop Correct. A sandbox can have different access, retention, and logging controls, so real customer data needs explicit approval and protection before upload. Risk-question sticky notes Not the problem. Risk prompts are useful when they lead to documented decisions and controls. Locked storage cabinet Not the issue. Physical storage can be part of protection; the failure is…
Sign up free: one personalized lesson every day, matched to your role and goals.
Already have an account? Sign in