New answers tagged

1

The best answer can only give a lawyer. To my knowledge, it mainly depends, if there is a legal base for providing Email address of one user to another user. See the Article 6 "Lawfulness of processing" in DSGVO. A few examples. (a) the data subject has given consent to the processing of his or her personal data for one or more specific purposes; One ...


4

Waking the zombie at my own peril and for the benefit of people looking to understand this control. I did a fair amount of research on the subject and was able to find a pretty definitive answer. Stay with me because it isn't short, but it's pretty definitive. As best I understand it, if you are an implementor of a cryptographic control module that ...


1

I don't have a lot of experience in the world of security and compliance. I'm wondering if this is universally accepted as a non-starter or if this is maybe just his preference? Although this might be your co-worker's preference, it is also the best practice as suggested by Microsoft. The following is from the Microsoft website: SQL Server has two ...


1

In my experience, deferring to windows controller authentication is advantageous for a few reasons: It simplifies removing access - how many times has someone logged into a sparsely used vendor platform and discovered that someone terminated years ago still had access? Anecdotally, I've had instances where I didn't even recognize the name of the user, as ...


Top 50 recent answers are included