7.2.6 Data Security and Internal Audit
These two areas have overlapping concerns. Data Security is a part of the development
process from the beginning, helping to ensure that appropriate controls over data are designed
into the product. Acceptance testing validates that data is being captured and stored
appropriately, but also that all privacy concerns, including access to sensitive data, are well
managed.