SDI Regulatory Compliance & Legal Framework 2

Question 1

Under GDPR, what is the maximum timeframe within which a data breach must be reported to the supervisory authority once detected?

Accepted Answer

72 hours

Answer

GDPR Article 33 requires that personal data breaches be reported to the supervisory authority within 72 hours of becoming aware of the breach.

Question 2

Which U.S. federal law requires healthcare organizations and their business associates to implement safeguards for protected health information (PHI)?

Accepted Answer

HIPAA

Answer

HIPAA (Health Insurance Portability and Accountability Act) mandates administrative, physical, and technical safeguards for PHI handled by covered entities and business associates.

Question 3

A service desk analyst inadvertently emails a customer's account details to the wrong recipient. Under data protection principles, this most directly violates which principle?

Accepted Answer

Integrity and confidentiality

Answer

Sending personal data to an unauthorized recipient violates the integrity and confidentiality (security) principle, which requires appropriate protection against unauthorized disclosure.

Question 4

ISO/IEC 20000-1 is specifically relevant to IT service management because it:

Accepted Answer

Sets requirements for an IT service management system

Answer

ISO/IEC 20000-1 specifies the requirements for establishing, implementing, maintaining, and improving an IT service management system (SMS).

Question 5

PCI DSS compliance is required for organizations that:

Accepted Answer

Store, process, or transmit cardholder data

Answer

PCI DSS (Payment Card Industry Data Security Standard) applies to any entity that stores, processes, or transmits cardholder data, regardless of size or number of transactions.

(SDI) Service Desk Institute Certifications Practice Test

(SDI) Service Desk Institute Certifications Practice Test

SDI Regulatory Compliance & Legal Framework 2