The sales team decides that it must collect household income level and employment status from visitors to the website. The team proposes to collect this information via a two-question survey offered to all visitors to the website:
Please enter your household income in dollar format ($4000.00).
Are you employed? Choose yes or no.
Visitors are not required to complete the survey, but they will be offered a discount code for a future purchase if they do complete it and also provide their email address to the company (the discount code will be emailed to the survey completer). If a website visitor eventually ends up purchasing an appliance, the visitor’s survey responses will be stored in the customer account profile maintained for that person.
Question 1; Identify two to five mitigations that minimize potential risks to the security of the data that the sales team proposes to collect.
Question 2: Given the entirety of the scenario as stated in Parts 1, 2, and 3, would you allow the sales team to collect this new data? Why or why not?