A vendor contract promises 'bank-grade encryption' but the city also has a state records law. How should the security manager treat these drivers?
Select an answer to reveal the explanation.
Short Explanation
A glossy contract line about 'bank-grade encryption' is one promise. A state records law is another obligation entirely. Hitting the brochure wording does not magically clear the statute — you have to satisfy each driver on its own terms.
Full Explanation
Security requirements arise from multiple sources: contracts, statutes, regulations, and industry standards. A vendor's contractual encryption claim does not supersede or fulfill a state records law's retention, access, or protection mandates. Practitioners must inventory and satisfy each applicable driver; conflating marketing language with legal compliance creates false assurance.