INMT 341 Final Exam Questions with Correct Answers

Governance what we do to keep our stuff safe Risk Management identifying and controlling the risks associated w. processes, technologies, and systems GDPR (General Data Protection Regulation) any organization processing personal data of EU residents must protect personal data CCPA (California Consumer Privacy Act) mirrors the standards in GDPR; organizations processing information on CA residents or doing business in CA must protect personal data PIPEDA (Personal Information Protection and Electronic Documents Act) Canadian law that mirrors the standards in GDPR FERPA (Family Educational Rights and Privacy Act) federal law that affords parents the right to have access to their children's education records, the right to seek to have the records amended, and the right to have some control over the disclosure of personally identifiable information from education records. When a student turns 18 years old or enters postsecondary education at any age, the rights under FERPA transfer from parent to student HIPPA (Health Insurance Portability and Accountability Act) governs healthcare organizations and partners creating, storing, and transmitting electronic protected health information PCI DSS (Payment Card Industry Data Security Standard) entities that take credit cards must protect privacy of customer financial data SOX (Sarbanes-Oxley Act) defined to secure the public against corporate fraud and misrepresentation J-SOX (Japanese SOX) set of Japanese standards for internal controls Risk a measure of the potential for loss or damage when a threat exploits a vulnerability ex. financial risk, competition risk, legal risk...