Exam CRISC topic 1 question 1686 discussion

When analyzing the risk associated with the web application, the first consideration should be whether the data sent by email has been encrypted. Encrypting data in transit protects it from being intercepted or accessed by unauthorized parties, which is crucial for maintaining data confidentiality and security. This step addresses a fundamental aspect of data protection before delving into other considerations such as service provider contracts or data center locations.