CIPM Test Study Section 2 (Ch. 4-7) Assess, Protect, Sustain, Respond | Complete Questions and Answers

CIPM Test Study Section 2 (Ch. 4-7) Assess, Protect, Sustain, Respond | Complete Questions and AnswersCIPM Test Study Section 2 (Ch. 4-7) Assess, Protect, Sustain, Respond | Complete Questions and AnswersCIPM Test Study Section 2 (Ch. 4-7) Assess, Protect, Sustain, Respond | Complete Questions and AnswersCIPM Test Study Section 2 (Ch. 4-7) Assess, Protect, Sustain, Respond | Complete Questions and AnswersCIPM Test Study Section 2 (Ch. 4-7) Assess, Protect, Sustain, Respond | Complete Questions and AnswersWhat 2 things does DLM establish? - ANSWER - 1. Data handling 2.Employee roles and responsibilities What are the manners in which breach occurs? What percent does each account for? - ANSWER - 1. Negligent insider 34% 2. Outsourcing data to 3rd party 19% 3. Malicious insider 16% 4. Systems "glitch" 11% 5. Cyber attack 7% 6. Failure to shred documents 6% 3 types of Audits? - ANSWER - 1st Party - Internal 2nd Party - Supplier/Contractor 3rd Party - External How does a complaint handling procedure differ from a privacy question procedure? - ANSWER - A complaint handling procedure is more formal (required by some data protection laws) and should include: 1. centralized intake 2. escalation process 3. management from intake to resolution 4. flexibility to a) involve stakeholders as needed and b) function between teams for privacy complaints embedded in ethics complaints In incident response, what should a company do with regards to letter drops (notifications by email)? - ANSWER - Front load the work: -establish secure data channel -create letter in advance -obtain content approvals -send logo and signature files to Printer before an incident occurs -supply return address to Printer Role of union leadership in breach planning and response? - ANSWER - Planning: represent union members interest; plan to speak on behalf of members