New answers tagged compliance
1
The best answer can only give a lawyer.
To my knowledge, it mainly depends, if there is a legal base for providing Email address of one user to another user. See the Article 6 "Lawfulness of processing" in DSGVO.
A few examples.
(a) the data subject has given consent to the processing of his or her
personal data for one or more specific purposes;
One ...
4
Waking the zombie at my own peril and for the benefit of people looking to understand this control. I did a fair amount of research on the subject and was able to find a pretty definitive answer. Stay with me because it isn't short, but it's pretty definitive.
As best I understand it, if you are an implementor of a cryptographic control module that ...
1
I don't have a lot of experience in the world of security and
compliance. I'm wondering if this is universally accepted as a
non-starter or if this is maybe just his preference?
Although this might be your co-worker's preference, it is also the best practice as suggested by Microsoft. The following is from the Microsoft website:
SQL Server has two ...
1
In my experience, deferring to windows controller authentication is advantageous for a few reasons:
It simplifies removing access - how many times has someone logged into a sparsely used vendor platform and discovered that someone terminated years ago still had access? Anecdotally, I've had instances where I didn't even recognize the name of the user, as ...
Top 50 recent answers are included
