CIPM CIPM Privacy Risk Management 2

Question 1

Which four options are commonly used to treat privacy risks identified during a risk assessment?

Accepted Answer

Avoid, mitigate, transfer, and accept

Answer

The four standard risk treatment options are: avoid (stop the risky activity), mitigate (reduce the risk), transfer (share risk via insurance or contracts), and accept (acknowledge and proceed with residual risk).

Question 2

What is the primary goal of threat modeling in a privacy risk management context?

Accepted Answer

To identify potential threats to personal data and design controls before they are exploited

Answer

Threat modeling proactively identifies potential adversaries, attack vectors, and vulnerabilities that could compromise personal data, enabling the design of appropriate preventive controls.

Question 3

Which NIST Special Publication provides a catalog of security and privacy controls for federal information systems?

Accepted Answer

NIST SP 800-53

Answer

NIST SP 800-53 provides a comprehensive catalog of security and privacy controls that federal agencies and contractors can use to protect information systems and personal data.

Question 4

What is the purpose of a privacy threshold assessment (PTA)?

Accepted Answer

To determine whether a full PIA or DPIA is required for a given project

Answer

A privacy threshold assessment is a preliminary screening tool that evaluates whether a proposed project or system involves sufficient privacy risk to warrant a full PIA or DPIA.

Question 5

How does an organization's 'risk appetite' influence its privacy program decisions?

Accepted Answer

It defines the level of risk the organization is willing to accept before taking additional action

Answer

Risk appetite establishes the threshold of acceptable risk, guiding decisions on which privacy risks require treatment and which residual risks can be tolerated without further controls.

CIPM - Certified Information Privacy Manager Practice Test

CIPM - Certified Information Privacy Manager Practice Test

CIPM CIPM Privacy Risk Management 2