Which of the following factor is least likely to be considered while implementing or augmenting data security solution for privacy protection: A. Security controls deployment at the database level B. Information security infrastructure up-gradation in the organization C. Classification of…
Which of the following statements is true with respect to organization’s privacy training and awareness program? A. Should define roles and responsibilities of personnel in privacy function B. Should cover employees of service provider dealing with personal information C. Should…
VCEplus: Professional IT Online Course – Learn Anything A company collects personal information about its employees and requests them to provide accurate information in order to avail benefits such as life insurance and medical insurance. Employees of the company have…
A Privacy Impact Assessment (PIA) should ideally accomplish which of the following goals? A. To determine the risks and effects of collecting, storing and distributing personal information B. To evaluate processes for handling personal information for mitigating potential privacy risks…
Privacy enhancing tools aim to allow users to take one or more of the following actions related to their personal data that is sent to, and used by online service providers, merchants or other users: i. Increase control over their…
One of the main objectives of ‘Do Not Track’ technology is to A. Opt out from the web based analytics services, advertising networks and social platforms B. Opt out from call back services by e-commerce companies C. Opt out from…
BS 10012 is a British standard used to establish ___________. A. Personal information management system B. Privacy technology architecture C. Privacy reference architecture D. Privacy by design framework
With respect to privacy monitoring and incident management process, which of the below should be a part of a standard incident handling process? I. Incident identification and notification II. Investigation and remediation III. Root cause analysis IV. User awareness training…
As a privacy assessor, what would most likely be the first artifact you would ask for while assessing an organization which claims that it has implemented a privacy program? A. Privacy risk management framework B. Records of privacy specific training…
Which among the following organizations does not issue a privacy seal? A. EuroPriSe B. BBBOnline C. Transaction Guard D. WebTrust