GCGA Ch. 11 Security Compliance (ST)

Question 1

Compliance programs

Answer 1

ensure that an organization complies with all of its legal and contractual obligations.

Question 2

Due diligence

Answer 2

refers to the actions taken to ensure the organization is aware of all legal requirements applicable to its operations. It involves understanding the risks, regulations, and standards relevant to the business and taking the necessary steps to align with them. Due care, meanwhile, is the continuous effort to ensure the organization adheres to these requirements and addresses any identified non-compliance in a timely manner.

Question 3

Attestation

Answer 3

refers to the verification by individuals within the organization or third parties that the organization is compliant with the relevant rules and regulations.

Question 4

Acknowledgement

Answer 4

the recognition and acceptance of these compliance standards by employees and other stakeholders.

Question 5

The right to be forgotten

Answer 5

empowers individuals to request that their personal data be erased from a company’s records under specific circumstances.

Question 6

Data inventory

Answer 6

a detailed list of where important data is kept, who can get to it, and why it’s used. Data retention policies say how long data should be kept and how to get rid of it safely when it’s not needed anymore.