CRM Information Security & Privacy

Question 1

What is the primary goal of information security?

Accepted Answer

To ensure data is protected from unauthorized access or changes.

Answer

The primary goal of information security is to protect the confidentiality, integrity, and availability (CIA triad) of information assets. This means safeguarding data from unauthorized access, use, disclosure, disruption, modification, or destruction. Effective information security measures are crucial for maintaining trust, complying with regulations, and protecting an organization's valuable data.

Question 2

Which method helps secure digital records?

Accepted Answer

Encrypting sensitive data.

Answer

Encrypted sensitive data is a fundamental method for securing digital records. Encryption transforms data into a coded format, making it unreadable to anyone without the correct decryption key. This protects information both in transit and at rest, ensuring that even if unauthorized individuals gain access to the data, they cannot understand or use it.

Question 3

What is 'least privilege' in access control?

Accepted Answer

Limiting access to only necessary data.

Answer

The principle of 'least privilege' in access control dictates that users, programs, or processes should be granted only the minimum level of access permissions necessary to perform their specific tasks. This minimizes the potential damage from accidental errors, misuse, or malicious activity, as it restricts what an unauthorized individual or compromised account can access or alter.

Question 4

What should organizations do to manage privacy risks?

Accepted Answer

Conduct privacy impact assessments.

Answer

To effectively manage privacy risks, organizations should conduct Privacy Impact Assessments (PIAs) or Data Protection Impact Assessments (DPIAs). These assessments systematically identify and evaluate potential privacy risks associated with new projects, systems, or data processing activities. They help organizations implement appropriate safeguards and ensure compliance with privacy regulations before issues arise.

Question 5

Why is multi-factor authentication important?

Accepted Answer

It enhances account protection with multiple verification methods.

Answer

Multi-factor authentication (MFA) significantly enhances security by requiring users to provide two or more verification factors to gain access to an account or system. These factors typically include something the user knows (like a password), something the user has (like a phone or token), and something the user is (like a fingerprint). This layered approach makes it much harder for unauthorized individuals to compromise accounts, even if they steal a password.

(CRM) Certified Records Manager Practice Test

(CRM) Certified Records Manager Practice Test

CRM Information Security & Privacy