10.1 Metrics

Question 1

Risks

Answer 1

1. Breach
2. Noncompliance with laws, regs
3. Data misuse

Question 2

Metrics definition

Answer 2

1) Tools that facilitate decision making and accountability through collection, analysis, reporting of data;
2) Must be measurable, clearly defined, indicate progress, answer specific questions;
3) Help organizations to define and measure progress towards goal; identify risks

Question 3

Necessary privacy metrics

Answer 3

1. Collection
2. Response to DS inquiries
3. Use
4. Retention
5. Disclosure to 3P
6. Incidents
7. Employee training
8. PIAs
9. Privacy risk indicators

Question 4

Use of privacy metrics

Answer 4

1. Trending
2. Privacy program ROI = (benefits-costs)/costs
3. Business resiliency/BCR
4. Privacy program maturity
5. Resource utilisation (cost of metrics)

Question 5

Metric life cycle

Answer 5

1. ID audience and involve in metric selection
2. define reporting resources (metric owner)
3. select metric
4. collect
5. analyze (use S/W)

Question 6

SMART methodology

Answer 6

1. Specific/simple
2. Manageable
3. Actionable
4. Relevant/results oriented
5. Timely/trending