Walton CIPP/E - Module 7 Security of Processing fully solved graded A+ 2023/2024

Walton CIPP/E - Module 7 Security of Processing Security is often a prerequisite for achieving what? - correct answers Compliance What are the financial implications of a beach? - correct answers 20 million euros or 4% of total worldwide annual turnover What are other consequences of brwaches - correct answers Bad press, media publicity, civil and group claims What article covers controller and processor security obligations - correct answers 32 Which security measures should an organization use? - correct answers Reflect on the consensus of security professionals Organization doesn't have to spend on the most expensive security measure but the one they choose should reflect what? - correct answers Good management decisions Appropriate technical and organizational measures include what? - correct answers Technical controls and organizational policies and procesures GDPR lists important results that technical and organizational measures should bring about, what are they? - correct answers Psuedonymisation Encryption Confidentiality Integrity Resilience A risk assessment will reflect what? - correct answers Nature of the data Context, purpose and scope of processing Threat factors that challenge data Harm that may result if there is a data breach Why doesn't the GDPR have any specific requirements when it comes to appropriate technical and security measures? - correct answers By the time the law is in place those measure would be outdated Security you provide has to be appropriate to the level of risk as it relates to what - correct answers Nature of the data Context of the data Purpose of the data Scope of the data What are security controls - correct answers The actual processes used to ensure the security of a system Security controls have 4 main attributes, what are they? - correct answers Confidentiality Integrity Availability Resilience What is confidentiality? - correct answers Individuals, entities, systems or applications access data on a need to know basis What is integrity? - correct answers Controls are in place to ensure data is accurate and complete What is availability? - correct answers Data is accessible when needed for a business activity What is resilience? - correct answers Data is able to withstand and recover from errors or threats