CCISO Legal and Regulatory 5

Question 1

Under the Children's Online Privacy Protection Act (COPPA), parental consent is required before collecting personal information from children under what age?

Accepted Answer

13

Answer

COPPA requires verifiable parental consent before collecting, using, or disclosing personal information from children under age 13.

Question 2

A multinational company undergoes an M&A transaction. From a legal and compliance standpoint, which due diligence area is most critical from a CISO's perspective?

Accepted Answer

Assessing inherited cybersecurity liabilities and regulatory obligations

Answer

During M&A due diligence, the acquiring company must assess inherited cybersecurity vulnerabilities, data breaches, regulatory violations, and compliance obligations of the target.

Question 3

Which US executive order significantly shaped federal cybersecurity requirements for critical infrastructure and established information-sharing between the private sector and government?

Accepted Answer

EO 14028

Answer

Executive Order 14028 (2021) on Improving the Nation's Cybersecurity modernized federal security standards, mandated zero trust architecture, and enhanced software supply chain security.

Question 4

The concept of 'privacy by design' requires organizations to embed privacy protections into systems from the outset. Which GDPR article explicitly codifies this requirement?

Accepted Answer

Article 25

Answer

GDPR Article 25 mandates Data Protection by Design and by Default, requiring controllers to integrate data protection into processing activities from the design stage.

Question 5

Under securities law, a CISO learns of a material cybersecurity incident affecting a publicly traded company. The SEC's 2023 cybersecurity disclosure rules require public disclosure within how many business days?

Accepted Answer

4 business days

Answer

The SEC's 2023 cybersecurity rules require public companies to disclose material cybersecurity incidents on Form 8-K within four business days of determining materiality.

(CCISO) EC-Council Certified CISO Practice Test

(CCISO) EC-Council Certified CISO Practice Test

CCISO Legal and Regulatory 5