CIAM Compliance Standards 2

Question 1

Under HIPAA's Security Rule, which safeguard category requires covered entities to implement access control policies for electronic PHI?

Accepted Answer

Technical safeguards

Answer

HIPAA Technical Safeguards mandate access controls, audit controls, integrity controls, and transmission security for ePHI systems.

Question 2

Which PCI DSS requirement specifically addresses the need to assign a unique ID to each person with computer access?

Accepted Answer

Requirement 8

Answer

PCI DSS Requirement 8 covers identification and authentication of access to system components, including assigning unique IDs.

Question 3

SOX Section 404 compliance primarily requires organizations to do which of the following related to IAM?

Accepted Answer

Assess and report on internal controls over financial reporting

Answer

SOX Section 404 mandates management assessment and auditor attestation of internal controls over financial reporting, including access controls.

Question 4

The GDPR principle of 'data minimization' most directly influences which IAM practice?

Accepted Answer

Least privilege access provisioning

Answer

Data minimization aligns with least privilege by ensuring users only access the minimum data necessary for their role.

Question 5

Which compliance framework introduced the concept of 'segregation of duties' as a key control for preventing fraud in financial systems?

Accepted Answer

Sarbanes-Oxley Act (SOX)

Answer

SOX heavily emphasizes segregation of duties as an internal control to prevent a single individual from controlling all aspects of a financial transaction.

(CIAM) Certified Identity and Access Manager Practice Test

(CIAM) Certified Identity and Access Manager Practice Test

CIAM Compliance Standards 2