Exam CISA topic 1 question 177 discussion

Answer is A, because question is referring to 'during transmission of data'

B. The third party's privacy and data security policies The most important factor for the IS auditor to evaluate to ensure that risk associated with leakage of privacy-related data during transmission is effectively managed is the third party's privacy and data security policies. It is important for the organization to ensure that the third parties it shares customer data with have adequate safeguards in place to protect the data from unauthorized access or disclosure. The IS auditor should review the third party's policies and procedures to ensure that they are sufficient to protect the privacy of the organization's customers. Options A, C, and D may also be important to consider, but they are not as significant as the third party's privacy and data security policies

Policies can be present but they do not guarantee us that data is encrypted so A si the answer

no it is A