Cert Master

KT-CG Documentation

Data flow diagrams for PHI are missing for a new SaaS tool. Why needed?

Multiple choice — select one answer

Answer choices

  1. a. SaaS has no data flows, without security or identity team coordination per policy.
  2. b. Only lawyers need diagrams, without security or identity team coordination per policy.
  3. c. Shows where PHI transits for HIPAA risk analysis and BAAs
  4. d. Diagrams replace encryption, without security or identity team coordination per policy.

Architectural breakdown & explanation

DFDs support risk assessments and vendor due diligence.

Correct answer(s): c. Shows where PHI transits for HIPAA risk analysis and BAAs

Exam domain: Documentation (20% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the KeyTrain's Key Training — Compliance & Governance bank. Run a full timed practice exam with domain-weighted random questions in your browser.

Start practice exam View exam overview All certifications