Exam PCCET topic 1 question 20 discussion

he correct answer is: B. How the application can be used Explanation: Local organization security policies for a SaaS (Software as a Service) application typically define guidelines and rules for how employees or users within the organization can use the application. These policies address: Acceptable use of the application Access control and user permissions Data sharing and privacy rules Compliance requirements for the organization's data handling Security measures like password policies and multi-factor authentication (MFA)

B. how the application can be used The local organisation's security policies for a SaaS application typically cover how the application can be used. This includes guidelines on access, configuration and proper use of the application to ensure that security and compliance with organisational standards are maintained. Option C. how the application processes the data is also relevant, as security policies may include how information is handled and processed within the application to ensure data protection and regulatory compliance. However, in the context of organisational security policies for SaaS applications, it is more common to focus on how the application can be used (option B), as this covers practical aspects of access and use of the application by users, and policies usually define the rules for secure use of the application. Both options are important in the context of security, but option B is more directly applicable to usage policies within an organisation.

Data security