Which of the following should an IT privacy practitioner review FIRST to understand where personal...

A data inventory is a comprehensive list of the data that an organization collects, processes, stores, transfers, and disposes of. It includes information such as the type, source, location, owner, purpose, and retention period of the data. A data inventory is essential for understanding where personal data is coming from and how it is used within the organization, as well as for complying with data privacy laws and regulations. A data inventory also helps to identify and mitigate data privacy risks and gaps.

References:

ISACA, CDPSE Review Manual 2021, Chapter 2: Privacy Governance, Section 2.2: Data Inventory and Data Mapping, p. 40-41.

ISACA, Data Privacy Audit/Assurance Program, Control Objective 3: Data Inventory and Classification, p. 7-81