CMO Data Security & Privacy Management Flashcards

Which encryption standard is recommended for protecting data transmitted between Mobilyze field devices and the central server?

Answer: TLS 1.2 or higher

TLS 1.2 or higher is the industry-recommended protocol for encrypting data in transit between Mobilyze field devices and servers.

What is the primary purpose of role-based access control (RBAC) within the Mobilyze platform?

Answer: To limit system access to authorized personnel only

RBAC ensures that only authorized personnel can access specific functions and data within the Mobilyze platform, reducing insider threat risk.

When a Mobilyze operator leaves a company, what is the FIRST step to protect data security?

Answer: Immediately revoke their system credentials and access tokens

Immediately revoking credentials and access tokens prevents former employees from accessing sensitive Mobilyze data.

Which of the following is a best practice for password management on Mobilyze operator accounts?

Answer: Using complex, unique passwords and rotating them regularly

Using complex, unique passwords and rotating them regularly minimizes the risk of unauthorized account access.

Under US data privacy regulations, what must a CMO operator do before sharing client-collected field data with a third party?

Answer: Obtain proper authorization or consent as required by the data agreement

US data privacy frameworks require that proper authorization or consent be obtained before sharing client data with any third party.

What should a CMO operator do if they suspect a data breach has occurred on a Mobilyze-connected device?

Answer: Immediately isolate the device and report the incident per the incident response plan

Isolating the affected device and following the incident response plan limits breach exposure and complies with notification requirements.