Which of the following BEST describes the relationship between a privacy program and an information security program within a governance framework?
-
A
Privacy and security are identical programs requiring only one team
-
B
Security protects data from unauthorized access; privacy governs how data is legitimately collected and used
-
C
Privacy is a subset of security with no independent requirements
-
D
Security programs are optional when a privacy program exists