CSC Cybersecurity Regulations & Legal Frameworks 2

Question 1

Under HIPAA, which entity is directly required to comply with the Security Rule?

Accepted Answer

Covered entities and their business associates

Answer

HIPAA's Security Rule applies to covered entities (healthcare providers, health plans, clearinghouses) and business associates who handle protected health information on their behalf.

Question 2

Which law establishes the federal framework for protecting consumer financial information and requires financial institutions to implement safeguards?

Accepted Answer

Gramm-Leach-Bliley Act (GLBA)

Answer

The Gramm-Leach-Bliley Act (GLBA) requires financial institutions to explain their information-sharing practices and protect sensitive consumer data.

Question 3

GDPR's 'right to erasure' (right to be forgotten) allows individuals to request deletion of their personal data EXCEPT when:

Accepted Answer

Processing is necessary for compliance with a legal obligation

Answer

GDPR permits refusal of erasure requests when processing is required to comply with a legal obligation under EU or member state law.

Question 4

Which federal agency enforces Section 5 of the FTC Act against unfair or deceptive cybersecurity practices by companies?

Accepted Answer

Federal Trade Commission

Answer

The FTC enforces Section 5 of the FTC Act, which prohibits unfair or deceptive practices including failing to implement reasonable data security measures.

Question 5

Under the Cybersecurity Information Sharing Act (CISA 2015), sharing cyber threat indicators with the federal government grants organizations:

Accepted Answer

Certain antitrust and liability protections with privacy scrubbing requirements

Answer

CISA 2015 provides liability protections for private entities sharing cyber threat indicators, but requires scrubbing personally identifiable information before sharing.

(CSC) Cybersecurity Compliance Certification Practice Test

(CSC) Cybersecurity Compliance Certification Practice Test

CSC Cybersecurity Regulations & Legal Frameworks 2