Identifying and Safeguarding PII DS-IF101.06 (all answered)

True or false? An individual whose PII has been stolen is susceptible to identity theft, fraud, and other damage. correct answers ***True False True or false? Information that has been combined with other information to link solely to an individual is considered PII. correct answers ***True False True or false? A System of Records Notice (SORN) is not required if an organization determines that PII will be stored using a system of records. correct answers ***True False What law establishes the public's right to access federal government information? correct answers DoD 5400.11-R: DoD Privacy Program OMB Memorandum M-17-12: Preparing for and Responding to a Breach of Personally Identifiable Information The Privacy Act of 1974 ***The Freedom of Information Act (FOIA) Which action requires an organization to carry out a Privacy Impact Assessment? correct answers Storing paper-based records Collecting any CUI, including but not limited to PII ***Collecting PII to store in a new information system Collecting PII to store in a National Security System An organization with an existing system of records decides to start using PII for a new purpose outside the "routine use" defined in the System of Records Notice (SORN). Is this a permitted use? correct answers Yes ***No Which of the following are examples of PII? correct answers ***Social Security Number (SSN) ***Driver's License Number ***Fingerprint First Pet's Name Identify each law or regulation correct answers This regulation governs the DoD Privacy Program. - DoD 5400.11-R: DoD Privacy Program This law establishes the public's right to access federal government information. - FOIA This guidance identifies federal information security controls. - OMB M-17-12 This law establishes the federal government's legal responsibility for safeguarding PII. - Privacy Act of 1974