CRM Information Security & Privacy 5

Question 1

Which security framework provides a voluntary set of guidelines for managing cybersecurity risk and is widely used by US organizations to protect information assets?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

The NIST CSF is a voluntary framework of best practices for managing and reducing cybersecurity risk, widely adopted by US public and private sector organizations.

Question 2

A records manager is implementing a 'clean desk policy.' What is the PRIMARY security goal of this policy?

Accepted Answer

Prevent unauthorized access to physical records and sensitive information left unattended

Answer

A clean desk policy requires employees to secure physical records and devices when not in use, preventing unauthorized viewing or theft.

Question 3

Under California's CCPA, which of the following rights is granted to California consumers regarding their personal information?

Accepted Answer

The right to know what personal data is collected and to opt out of its sale

Answer

The CCPA gives California consumers the right to know what personal information is collected, the right to delete it, and the right to opt out of its sale.

Question 4

What is the key difference between 'anonymization' and 'pseudonymization' of records?

Accepted Answer

Pseudonymization replaces identifiers with codes that can be re-linked; anonymization removes all identifying information permanently

Answer

Pseudonymization replaces direct identifiers with codes (re-linkable with a key), while anonymization irreversibly removes all identifying information.

Question 5

Which of the following is a key requirement of a records security program for vital records?

Accepted Answer

Vital records must be identified, duplicated, and protected to ensure organizational continuity

Answer

Vital records programs require identification, duplication, and secure off-site or redundant storage to ensure continuity of operations after a disaster.

(CRM) Certified Records Manager Practice Test

(CRM) Certified Records Manager Practice Test

CRM Information Security & Privacy 5