CDPSE Risk Management 2

Question 1

A CDPSE is evaluating a third-party vendor that processes personal health information on behalf of the organization. Which risk management step should be performed FIRST?

Accepted Answer

Conduct a vendor privacy risk assessment

Answer

A vendor privacy risk assessment identifies the scope and nature of risk before decisions about agreements or audits can be meaningfully made.

Question 2

Which of the following BEST describes residual risk in a data privacy context?

Accepted Answer

Risk that remains after privacy controls have been implemented

Answer

Residual risk is what remains after controls are applied; it must be evaluated to determine if it falls within the organization's risk appetite.

Question 3

An organization's risk appetite for data privacy is defined as low. A proposed marketing analytics project carries moderate privacy risk. What is the MOST appropriate response?

Accepted Answer

Implement additional privacy controls to reduce risk to an acceptable level

Answer

When risk exceeds risk appetite, the appropriate response is to implement controls that bring residual risk within acceptable bounds before proceeding.

Question 4

Which metric is MOST useful when quantifying the likelihood component of a privacy risk?

Accepted Answer

Historical frequency of similar threat events within the organization

Answer

Internal historical frequency of similar events provides the most relevant and organization-specific input for likelihood estimation.

Question 5

A CDPSE discovers that an automated profiling system makes decisions about loan eligibility using personal data without human review. Which privacy risk category BEST describes this situation?

Accepted Answer

Automated decision-making risk

Answer

Automated decision-making risk arises when systems make significant decisions about individuals without human oversight, a concern addressed by regulations like GDPR Article 22.

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE - Certified Data Privacy Solutions Engineer Practice Test

CDPSE Risk Management 2