CTO CTO Regulatory Compliance & Legal 2

Question 1

What is 'privacy by design' and how should a CTO embed it into the software development lifecycle?

Accepted Answer

Integrating data privacy protections into system design from the outset rather than adding them after development

Answer

Privacy by design means building data minimization, access controls, and privacy protections into systems from the earliest design stage, reducing risk and ensuring regulatory compliance.

Question 2

Under the Americans with Disabilities Act (ADA), what obligation do CTOs have regarding publicly accessible web applications?

Accepted Answer

Ensuring web applications meet accessibility standards (WCAG) so people with disabilities can use them

Answer

Courts and the DOJ have interpreted the ADA to require that websites and web applications be accessible to people with disabilities, generally measured against WCAG 2.1 AA standards.

Question 3

A CTO discovers that a third-party vendor has suffered a data breach exposing customer PII. Under GDPR, how quickly must the supervisory authority typically be notified?

Accepted Answer

Within 72 hours of becoming aware of the breach

Answer

GDPR Article 33 requires organizations to notify their supervisory authority within 72 hours of becoming aware of a personal data breach, unless the breach is unlikely to result in risk.

Question 4

Which framework provides a structured approach for US federal agencies and contractors to assess and manage cybersecurity risk and is widely adopted by the private sector?

Accepted Answer

NIST Cybersecurity Framework (CSF)

Answer

The NIST CSF organizes cybersecurity activities into five functions (Identify, Protect, Detect, Respond, Recover) and is widely used by both federal agencies and private enterprises.

Question 5

What is the legal concept of 'intellectual property' most directly relevant to a CTO negotiating a software development contract with an outsourced vendor?

Accepted Answer

Work-for-hire clauses that determine ownership of software created by the vendor

Answer

Work-for-hire provisions in contracts establish that software created by an external vendor is owned by the company that commissioned it, which is critical to protect product IP.

(CTO) Certified Chief Technology Officer Practice Test

(CTO) Certified Chief Technology Officer Practice Test

CTO CTO Regulatory Compliance & Legal 2