CDPSE 무료 덤프문제 온라인 액세스

Which of the following should FIRST be established before a privacy office starts to develop a data protection and privacy awareness campaign?

• A.Detailed documentation of data privacy processes
• B.Strategic goals of the organization
• C.Contract requirements for independent oversight
• D.Business objectives of senior leaders

Which of the following is MOST important to consider when managing changes to the provision of services by a third party that processes personal data?

• A.Changes to current information architecture
• B.Modifications to data quality standards
• C.Updates to data life cycle policy
• D.Business impact due to the changes

When configuring information systems for the communication and transport of personal data, an organization should:

• A.review configuration settings for compliance.
• B.adopt the default vendor specifications.
• C.enable essential capabilities only.
• D.implement the least restrictive mode.

Data collected by a third-party vendor and provided back to the organization may not be protected according to the organization's privacy notice. Which of the following is the BEST way to address this concern?

• A.Validate contract compliance.
• B.Obtain independent assurance of current practices.
• C.Re-assess the information security requirements.
• D.Review the privacy policy.

What is the BES T way for an organization to maintain the effectiveness of its privacy breach incident response plan?

• A.Conduct annual data privacy tabletop exercises
• B.Hire a third party to perform a review of data privacy processes.
• C.Require security management to validate data privacy security practices.
• D.Involve the privacy office in an organizational review of the incident response plan.