D486 Governance, Risk and Compliance Exam
Questions with 100% Correct Answers
ICFR (Internal Control over Financial Reporting)
a process designed to provide reasonable assurance regarding the reliability of financial
reporting and the preparation of financial statements in accordance with GAAP. SOX Section
404 requires this.
FERPA (Family Educational Rights and Privacy Act)
A federal law that regulates the management of student records and disclosure of information
from those records. The Act has its own administrative enforcement mechanism.
(COPPA) Children's Online Privacy Protection Act of 1988
The purpose is to restrict the online collection of personal information of children under 13
years of age.
CIPA
Children's Internet Protection Act whose purpose is to protect children from exposure to
offensive internet content. Requires schools that participate in the E-Rate federal funding
program to filter offensive internet content such as pornography.
a company that has identified a potential risk has four ways to handle the risk:
Risk Acceptance
Risk transfer
Risk Avoidance
Questions with 100% Correct Answers
ICFR (Internal Control over Financial Reporting)
a process designed to provide reasonable assurance regarding the reliability of financial
reporting and the preparation of financial statements in accordance with GAAP. SOX Section
404 requires this.
FERPA (Family Educational Rights and Privacy Act)
A federal law that regulates the management of student records and disclosure of information
from those records. The Act has its own administrative enforcement mechanism.
(COPPA) Children's Online Privacy Protection Act of 1988
The purpose is to restrict the online collection of personal information of children under 13
years of age.
CIPA
Children's Internet Protection Act whose purpose is to protect children from exposure to
offensive internet content. Requires schools that participate in the E-Rate federal funding
program to filter offensive internet content such as pornography.
a company that has identified a potential risk has four ways to handle the risk:
Risk Acceptance
Risk transfer
Risk Avoidance