To ensure effective management of an organization's data privacy policy, senior leadership MUST define:
Correct Answer: B
Explanation
Senior leadership must define the roles and responsibilities of the person with oversight, who is responsible for ensuring compliance with the data privacy policy and applicable laws and regulations. This person may also be known as the data protection officer, the privacy officer, or the chief privacy officer, depending on the organization and jurisdiction. The person with oversight should have the authority, resources, and independence to perform their duties effectively.
References:
* ISACA, CDPSE Review Manual 2021, Chapter 2: Privacy Governance, Section 2.1: Privacy Governance Framework, p. 35-36.
* ISACA, Data Privacy Audit/Assurance Program, Control Objective 1: Data Privacy Governance, p. 4-51