Module 6

Question 1

Legal risks

Answer 1

Not complying with privacy laws (state, federal and international)
Not fulfilling contractual commitments

Question 2

Reputational risks

Answer 2

Damaging trust in the brand: Organizations can face both legal enforcement and reputational harm if they do not adhere to their stated privacy policies

Question 3

Operational risks

Answer 3

Affecting efficiency

Inhibiting use of personal information that benefits the organization and customers

Question 4

Investment risks

Answer 4

Hampering the ability of the organization to receive an appropriate return on its investments in information, IT and information processing programs

Question 5

four distinct steps in Developing an information management program

Answer 5

Discover, Build, Communicate and Evolve.

Question 6

The steps in the development of an incident response program include

Answer 6

Preparation, identification, containment, eradication, recovery and lessons learned.

Question 7

The classification level

Answer 7

defines the clearance of individuals who can access or handle that data, as well as the baseline level of protection that is appropriate for that data.

Question 8

Data sensitivity levels

Answer 8

confidential, proprietary, sensitive, restricted and public data