Practice Test Geeks(GRC) Governance, Risk, and Compliance Certification Practice Test
← All GRC Flashcard Decks

GRC Data Privacy and Information Governance Flashcards

6 cards from real GRC practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 GRC Data Privacy and Information Governance flashcards as text

  1. Which of the following best describes a Privacy Impact Assessment (PIA)?

    Answer: A systematic process for evaluating privacy risks of a new system or process

    A PIA is a structured analysis used to identify and mitigate privacy risks before deploying a new project, system, or business process involving personal data.

  2. Which data classification level typically requires the highest level of security controls within a U.S. enterprise GRC framework?

    Answer: Restricted/Top Secret

    Restricted or Top Secret data classification represents the most sensitive information and mandates the strictest access and protection controls.

  3. The role of a Data Protection Officer (DPO) under privacy regulations is to:

    Answer: Oversee compliance with data protection laws and serve as a point of contact for regulators

    A DPO is responsible for monitoring internal compliance with data protection requirements and acts as the primary liaison with data protection authorities.

  4. Which principle ensures that individuals can obtain their personal data in a usable format and transfer it to another service provider?

    Answer: Data portability

    Data portability is the right that allows individuals to receive their personal data in a structured, commonly used format and move it between services.

  5. In a GRC context, 'data lineage' refers to:

    Answer: Tracking the origin, movement, and transformation of data through its lifecycle

    Data lineage documents where data comes from, how it moves through systems, and how it is transformed, supporting auditability and compliance.

  6. Which U.S. law requires financial institutions to explain their information-sharing practices to customers and safeguard sensitive customer data?

    Answer: GLBA

    The Gramm-Leach-Bliley Act (GLBA) mandates that financial institutions protect the privacy and security of consumers' personal financial information.