Posted in Risk Management
Q2: Your company's e-commerce platform stores customer PII in a third-party cloud service. A peer retailer…
George B. — Senior Software Engineer
Q2: Your company's e-commerce platform stores customer PII in a third-party cloud service. A peer retailer just disclosed that unauthorized access to its third-party cloud service may have exposed 7.7 million customers' data. As security lead, what should you prioritise first?
===
We should prioritise vendors handling sensitive PII, review access logs for suspicious activity, and rotate credentials where exposure is suspected.

4 reactions · 0 comments