CIPM Exam: Absolutely Free Online Practice

Free IAPP CIPM Exam Questions

Why were the nongovernmental privacy organizations, Electronic Frontier Foundation (EFF) and Electronic

Privacy Information Center (EPIC), established?

Please use the following to answer the next question:

Henry Home Furnishings has built high-end furniture for nearly forty years. However, the new owner, Anton, has

found some degree of disorganization after touring the company headquarters. His uncle Henry had always

focused on production – not data processing – and Anton is concerned. In several storage rooms, he has found

paper files, disks, and old computers that appear to contain the personal data of current and former employees

and customers. Anton knows that a single break-in could irrevocably damage the company's relationship with

its loyal customers. He intends to set a goal of guaranteed zero loss of personal information.

To this end, Anton originally planned to place restrictions on who was admitted to the physical premises of the

company. However, Kenneth – his uncle's vice president and longtime confidante – wants to hold off on Anton's

idea in favor of converting any paper records held at the company to electronic storage. Kenneth believes this

process would only take one or two years. Anton likes this idea; he envisions a password-protected system that

only he and Kenneth can access.

Anton also plans to divest the company of most of its subsidiaries. Not only will this make his job easier, but it

will simplify the management of the stored data. The heads of subsidiaries like the art gallery and kitchenware

store down the street will be responsible for their own information management. Then, any unneeded subsidiary

data still in Anton's possession can be destroyed within the next few years.

After learning of a recent security incident, Anton realizes that another crucial step will be notifying customers.

Kenneth insists that two lost hard drives in question are not cause for concern; all of the data was encrypted

and not sensitive in nature. Anton does not want to take any chances, however. He intends on sending notice

letters to all employees and customers to be safe.

Anton must also check for compliance with all legislative, regulatory, and market requirements related to

privacy protection. Kenneth oversaw the development of the company's online presence about ten years ago,

but Anton is not confident about his understanding of recent online marketing laws. Anton is assigning another

trusted employee with a law background the task of the compliance assessment. After a thorough analysis,

Anton knows the company should be safe for another five years, at which time he can order another check.

Documentation of this analysis will show auditors due diligence.

Anton has started down a long road toward improved management of the company, but he knows the effort is

worth it. Anton wants his uncle's legacy to continue for many years to come.

Which important principle of Data Lifecycle Management (DLM) will most likely be compromised if Anton

executes his plan to limit data access to himself and Kenneth?

Please use the following to answer the next question:

Natalia, CFO of the Nationwide Grill restaurant chain, had never seen her fellow executives so anxious. Last

week, a data processing firm used by the company reported that its system may have been hacked, and

customer data such as names, addresses, and birthdays may have been compromised. Although the attempt

was proven unsuccessful, the scare has prompted several Nationwide Grill executives to question the

company's privacy program at today's meeting.

Alice, a vice president, said that the incident could have opened the door to lawsuits, potentially damaging

Nationwide Grill's market position. The Chief Information Officer (CIO), Brendan, tried to assure her that even if

there had been an actual breach, the chances of a successful suit against the company were slim. But Alice

remained unconvinced.

Spencer – a former CEO and currently a senior advisor – said that he had always warned against the use of

contractors for data processing. At the very least, he argued, they should be held contractually liable for telling

customers about any security incidents. In his view, Nationwide Grill should not be forced to soil the company

name for a problem it did not cause.

One of the business development (BD) executives, Haley, then spoke, imploring everyone to see reason.

"Breaches can happen, despite organizations' best efforts," she remarked. "Reasonable preparedness is key."

She reminded everyone of the incident seven years ago when the large grocery chain Tinkerton's had its

financial information compromised after a large order of Nationwide Grill frozen dinners. As a long-time BD

executive with a solid understanding of Tinkerton's's corporate culture, built up through many years of

cultivating relationships, Haley was able to successfully manage the company's incident response.

Spencer replied that acting with reason means allowing security to be handled by the security functions within

the company – not BD staff. In a similar way, he said, Human Resources (HR) needs to do a better job training

employees to prevent incidents. He pointed out that Nationwide Grill employees are overwhelmed with posters,

emails, and memos from both HR and the ethics department related to the company's privacy program. Both

the volume and the duplication of information means that it is often ignored altogether.

Spencer said, "The company needs to dedicate itself to its privacy program and set regular in-person trainings

for all staff once a month."

Alice responded that the suggestion, while well-meaning, is not practical. With many locations, local HR

departments need to have flexibility with their training schedules. Silently, Natalia agreed.

Based on the scenario, Nationwide Grill needs to create better employee awareness of the company's privacy

program by doing what?

What is the key factor that lays the foundation for all other elements of a privacy program?

Free IAPP CIPM Exam Questions

Absolute Free CIPM Exam Practice for Comprehensive Preparation