Chris has recently been hired into a new organization. The organization that Chris belongs to uses the following classification process:克里斯最近受雇于一个新的组织。Chris所属的组织使用以下分类过程:
1)Criteria are set for classifying data. 为数据分类设置了标准。
2)Data owners are established for each type of data. 为每种类型的数据建立数据所有者。
3)Data is classified. 数据是分类的。
4)Required controls are selected for each classification. 为每个分类选择所需的控制。
5)Baseline security standards are selected for the organization. 为组织选择基线安全标准。
6)Controls are scoped and tailored. 控件的范围是限定的,并且是定制的。
7)Controls are applied and enforced. 应用并强制执行控制。
8)Access is granted and managed. 授予并管理访问权限。
If Chris’s company operates in the European Union and has been contracted to handle the data for a third party, what role is his company operating in when it uses this process to clas-sify and handle data?
如果Chris的公司在欧盟运营,并与第三方签订了处理数据的合同,那么当Chris的公司使用此流程分类和处理数据时,它将扮演什么角色?