IGP Compliance & Risk Management 4

Question 1

A 'heat map' in risk management visually plots risks according to:

Accepted Answer

Likelihood and potential impact

Answer

A risk heat map plots risks on a two-axis grid of likelihood (probability) and impact (severity) to prioritize response.

Question 2

HIPAA's Minimum Necessary Standard requires covered entities to:

Accepted Answer

Limit PHI access and disclosure to the minimum needed for the intended purpose

Answer

The Minimum Necessary Standard limits access to and use of PHI to only what is needed to accomplish the intended purpose.

Question 3

Which of the following best describes a Key Risk Indicator (KRI)?

Accepted Answer

A forward-looking metric that signals increasing risk exposure

Answer

KRIs are predictive metrics that provide early warning signals of increasing risk before an adverse event occurs.

Question 4

Under FTC regulations, a company's privacy policy that makes false or misleading claims about data practices could result in enforcement action for:

Accepted Answer

Unfair or deceptive acts or practices (UDAP)

Answer

The FTC enforces Section 5 of the FTC Act, which prohibits unfair or deceptive acts or practices, including misleading privacy representations.

Question 5

An organization decides not to pursue a new business opportunity because the associated data privacy risks are too high. This is an example of:

Accepted Answer

Risk avoidance

Answer

Risk avoidance means choosing not to engage in an activity because its risks outweigh the benefits.

(IGP) Information Governance Professional Practice Test