IGP Compliance & Risk Management 3

Question 1

Under GDPR, the maximum fine for the most serious violations is:

Accepted Answer

€20 million or 4% of global annual turnover

Answer

GDPR's highest tier of fines is €20 million or 4% of global annual turnover, whichever is higher.

Question 2

A Compliance Management Program (CMP) should be reviewed and updated:

Accepted Answer

On a regular schedule and when significant changes occur

Answer

An effective CMP requires periodic scheduled reviews as well as triggered reviews when regulations, business operations, or risk profiles change.

Question 3

Which document formally defines an organization's acceptable level of risk exposure?

Accepted Answer

Risk appetite statement

Answer

A risk appetite statement formally articulates the amount and type of risk an organization is willing to accept in pursuit of its objectives.

Question 4

An employee intentionally leaks confidential corporate data to a competitor. This is an example of:

Accepted Answer

Insider threat

Answer

An insider threat involves a current or former employee, contractor, or partner who misuses authorized access to harm the organization.

Question 5

The California Consumer Privacy Act (CCPA) grants consumers the right to:

Accepted Answer

Know, delete, and opt out of sale of their personal information

Answer

CCPA grants California consumers the rights to know what personal information is collected, to delete it, and to opt out of its sale.

(IGP) Information Governance Professional Practice Test