Study. uk . com
  1. Home
  2. All questions
  3. Question 185

CISSP study material · question 185 of 500

A customer record system and a billing table sit on the same host with no effective separation between them, and together identify individuals. Under NIST SP 800-122, how is that data described?

  1. De-identified, because identifiers were removed from each source separately.
  2. Anonymised, because neither source identifies individuals on its own.
  3. Linkable, because the association is possible but has not been made.
  4. Linked, because the association already exists on the same or a closely related system.
Show the answer

Answer: D. Linked, because the association already exists on the same or a closely related system.

Data is linked where it is logically associated with other information about the individual on the same or a closely related system without controls effectively segregating the sources.

Source: NIST SP 800-122 (NIST) — SP 800-122 > 2.1 PII Definition

Challenge yourself on this topic → Study as cards