Compliance Key Terms Drill

Question 1

Compliance

Answer 1

1. The action of meeting requirements of accepted practices, specific standards, laws, prescribed rules and regulations, or terms of a contract. Sentence: To save money, Acme Inc is improving compliance procedures.
2. That state of having met required regulations for the industry one is. Sentence: Acme Inc received their certification for dental compliance.

The purpose of compliance is to show that proper procedures and protections are in place to meet certain standards, requirements, laws, etc.
KnowBe4 offers a service called KCM, which stands for KnowBe4 Compliance Manager.

Question 2

KCM

Answer 2

KCM is a software-as-a-service (SaaS) that simplifies the complexity of getting compliant and eases the burden of staying compliant.

Most organizations track compliance using spreadsheets, word processors or self-maintained software such as Sharepoint (a platform designed by Microsoft, used for document management and storage). This is inefficient, error prone, costly, and risky.

Question 3

protected health information (PHI):

Answer 3

All recorded information about an individual’s health status, including their health care coverage.

Question 4

personally identifiable information (PII):

Answer 4

Any information that can be used on its own or with other information to identify, contact, or locate a single person.

Question 5

PCI DSS

Answer 5

Payment Card Industry Data Security Standard.

A document published by Payment Card Industry. The publication lists all requirements for securely handling credit cards and credit card information.
Organizations who accept credit cards must be PCI compliant. One of the requirements includes security awareness training.

Question 6

HIPAA

Answer 6

Health Insurance Portability and Accountability Act.

A law enacted by the U.S. Congress and signed by President Bill Clinton in 1996 that requires healthcare organizations to protect personal health information (PHI).

Question 7

GDPR

Answer 7

General Data Protection Regulation.

A regulation in European Union (EU) law on data protection and privacy for all individuals in the EU.