Excel VBA Regulatory Frameworks & Compliance 3

Question 1

Under GLBA (Gramm-Leach-Bliley Act), a VBA workbook stores customer financial information. Which control is most appropriate?

Accepted Answer

Encrypting the workbook with a strong password and restricting access via VBA-enforced user authentication

Answer

GLBA requires financial institutions to protect customer financial information through administrative, technical, and physical safeguards, including encryption and access controls.

Question 2

A VBA macro processes export-controlled technical data under ITAR. What access control should be implemented?

Accepted Answer

Check the current Windows username at workbook open and terminate if the user is not on an approved US-person list

Answer

ITAR restricts controlled technical data to US persons only; VBA can enforce this by checking user identity against an approved list at runtime.

Question 3

Which VBA approach supports ISO 27001 Annex A control A.12.4.1 (Event Logging) for a spreadsheet used in an ISMS?

Accepted Answer

Writing a timestamped entry to a secure log worksheet for every Workbook_Open, Save, and Close event

Answer

ISO 27001 A.12.4.1 requires event logging of user activities and security events; VBA event handlers that log every open, save, and close action fulfill this control.

Question 4

A VBA solution handles data subject to CCPA. A California resident submits an opt-out request. What must the macro do?

Accepted Answer

Immediately cease selling or sharing the resident's personal information and update their record with an opt-out timestamp

Answer

CCPA gives California residents the right to opt out of the sale of their personal information, requiring immediate action to stop data sharing and record the opt-out.

Question 5

When a VBA macro must comply with NIST SP 800-53 control AU-9 (Protection of Audit Information), which technique is appropriate?

Accepted Answer

Writing audit records to a hidden worksheet protected with an admin-only password and verifying log integrity with a hash

Answer

NIST AU-9 requires protecting audit information from unauthorized access, modification, and deletion; password-protected logs with integrity checks fulfill this control.

Excel VBA Practice Test

Excel VBA Practice Test

Excel VBA Regulatory Frameworks & Compliance 3