Risk & Compliance

Question 1

Vulnerability Assessment vs Pen Testing

Answer 1

Vulnerability Assessment = Scan for known issues
Penetration Testing = Simulate real attacks to find new issues
Example:
VA: Nessus scan
Pen Test: Try to break login with SQL injection

Question 2

GDPR Basics

Answer 2

What it is: Law protecting EU personal data
3 Principles:
Consent
Right to access/delete
Transparency
Example: User can request deletion of account data

Question 3

Privacy & Data Protection

Answer 3

What it is: Keeping user data safe and private
Consequences: Data breach → legal fines + loss of trust
Example: App leaks location data → violates privacy law

Question 4

Secure Software & Work Transformation

Answer 4

Definition: Software built with security from the ground up
Impacts:
Remote work tools = secure access to company systems
New job roles (e.g., cybersecurity analyst)

Question 5

Intellectual Property in Software

Answer 5

Forms of IP Protection:
Copyright — code
Trademark — logos/UI
Patent — unique algorithms
Trade secrets — internal tools
Example: Google’s PageRank = patented algorithm