BPA BPA Compliance, Auditing & Risk Management 3

Question 1

What is a 'control gap' in a BPA compliance review?

Accepted Answer

A missing or insufficient control that leaves a compliance requirement unaddressed

Answer

A period when no bots are running

Answer

The delay between a change request and its approval

Answer

An error in automation script logic

Question 2

Which risk assessment methodology assigns a numerical score to risks by multiplying likelihood by impact?

Accepted Answer

Quantitative risk analysis

Answer

SWOT analysis

Answer

PESTLE analysis

Answer

Root cause analysis

Question 3

A BPA process is found to be non-compliant during an internal audit. What is the appropriate immediate next step?

Accepted Answer

Issue a corrective action plan (CAP) to address the non-compliance within a defined timeline

Answer

Decommission the process immediately

Answer

Notify all external regulators

Answer

Delete the audit findings

Question 4

In BPA compliance, 'data lineage' refers to:

Accepted Answer

The documented journey of data from its origin through all transformations to its final destination

Answer

The age of the data stored in the system

Answer

The backup schedule for database files

Answer

The number of users who accessed a dataset

Question 5

Which approach best helps a BPA team proactively identify compliance risks before a new process goes live?

Accepted Answer

Conducting a pre-implementation compliance review or Privacy/Security Impact Assessment

Answer

Waiting for the first external audit

Answer

Deploying to production and monitoring for violations

Answer

Asking users to self-report issues

Question 6

Under GDPR, which BPA process design principle requires that only the minimum necessary personal data be collected and processed?

Accepted Answer

Data minimization

Answer

Data availability

Answer

Data portability

Answer

Data sovereignty