CDPSE Governance Frameworks 3

Question 1

Which NIST privacy framework function focuses on developing organizational understanding to manage privacy risk to individuals?

Accepted Answer

Identify-P

Answer

The Identify-P function in the NIST Privacy Framework establishes understanding of data processing activities and associated privacy risks.

Question 2

An organization adopts ISO 29100 as part of its governance framework. Which of the following does ISO 29100 primarily provide?

Accepted Answer

A privacy framework defining principles and terminology for PII protection

Answer

ISO 29100 provides a high-level privacy framework with principles and terminology for the protection of personally identifiable information.

Question 3

What is the primary purpose of conducting a privacy maturity assessment within a governance program?

Accepted Answer

To benchmark current capabilities against a defined model and identify gaps

Answer

A privacy maturity assessment benchmarks existing practices against a capability model, revealing gaps and prioritizing improvements.

Question 4

In privacy governance, a RACI matrix is used to:

Accepted Answer

Define who is Responsible, Accountable, Consulted, and Informed for privacy activities

Answer

A RACI matrix clarifies roles and ownership for privacy tasks, preventing accountability gaps and duplication of effort.

Question 5

Which governance mechanism allows organizations to demonstrate ongoing compliance rather than point-in-time compliance with privacy requirements?

Accepted Answer

Continuous monitoring and periodic privacy reviews

Answer

Continuous monitoring and periodic reviews provide ongoing assurance that controls remain effective as organizational and regulatory conditions change.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Governance Frameworks 3