CIPM 무료 덤프문제 온라인 액세스

You are the privacy officer at a university. Recently, the police have contacted you as they suspect that one of your students is using a library computer to commit financial fraud. The police would like your assistance in investigating this individual and are requesting computer logs and usage data of the student.
What Is your first step in responding to the request?

• A.Provide the data to police and record it for your own archives.
• B.Review policies, procedures and legislation to determine the university's obligation to co-operate with the police.
• C.Contact the university's legal counsel to determine if the request is lawful.
• D.Refuse the request as the police do not have a warrant.

An organization's business continuity plan or disaster recovery plan does NOT typically include what?

• A.Statement of organizational responsibilities.
• B.Emergency response guidelines.
• C.Retention schedule for storage and destruction of information.
• D.Recovery time objectives.

Which item below best represents how a privacy group can effectively communicate with functional areas?

• A.Choose a work unit representative and funnel all communications through that one person.
• B.Work closely with functional areas by acting as both an advisor and an advocate.
• C.Work independently and share the knowledge with functional groups.
• D.Monitor the responsibilities of managers who are responsible for the privacy of functional areas.

"Collection", "access" and "destruction" are aspects of what privacy management process?

• A.The breach response plan
• B.The data governance strategy
• C.The metric life cycle
• D.The business case

(When a privacy program is assessing the technical and organizational risks associated with third-party vendors or processors, which internal relationship is typically the most Important early on in the process?)

• A.Internal auditors.
• B.Information security.
• C.Physical security.
• D.Human resources.