CSL Cybersecurity Regulations & Compliance 2

Question 1

Under the NIST Cybersecurity Framework, which function focuses on developing and implementing appropriate safeguards to ensure delivery of critical services?

Accepted Answer

Protect

Answer

The Protect function covers safeguards such as access control, data security, and protective technology to limit the impact of potential cybersecurity events.

Question 2

Which federal law requires civilian federal agencies to inventory their IT assets and implement continuous monitoring programs?

Accepted Answer

FISMA

Answer

The Federal Information Security Modernization Act (FISMA) mandates that federal agencies develop, document, and implement an information security program including continuous monitoring.

Question 3

A company subject to PCI DSS stores cardholder data. Which PCI DSS requirement directly addresses the protection of stored cardholder data?

Accepted Answer

Requirement 3

Answer

PCI DSS Requirement 3 specifically mandates protecting stored cardholder data through encryption, masking, and other techniques.

Question 4

Which provision of the Gramm-Leach-Bliley Act (GLBA) requires financial institutions to protect the security and confidentiality of customer information?

Accepted Answer

Safeguards Rule

Answer

The GLBA Safeguards Rule requires financial institutions to implement a comprehensive information security program to protect customer data.

Question 5

Under GDPR, what is the maximum timeframe for notifying the supervisory authority after discovering a personal data breach?

Accepted Answer

72 hours

Answer

GDPR Article 33 requires controllers to notify the competent supervisory authority of a personal data breach within 72 hours of becoming aware of it.

(CSL) Cybersecurity Law Certification Practice Test

(CSL) Cybersecurity Law Certification Practice Test

CSL Cybersecurity Regulations & Compliance 2