Privacy Frameworks CDPSE Practice Questions (Page 3)

Questions 11–15

1. 11foundation · easy

   How can a privacy framework be integrated with an organization's broader GRC initiatives?

   • ABy keeping privacy controls completely separate from other risk management processes
   • BBy using the same risk assessment and control monitoring processes for privacy as for other risk areas
   • CBy replacing all existing GRC processes with the privacy framework
   • DBy requiring the privacy team to manage all GRC activities
   Reveal Solution Discussion Select an answer first
2. 12application · medium

   A healthcare organization is implementing the NIST Privacy Framework to improve its privacy risk management. The organization has already identified its privacy risk appetite and mapped its current privacy practices. What should the organization do next to align with the NIST Privacy Framework's implementation approach?

   • ADevelop a new privacy policy from scratch
   • BOutsource privacy risk management to a third-party vendor
   • CImmediately implement all framework controls to ensure full compliance
   • DConduct a gap analysis to compare current practices against the framework's desired outcomes
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   Which activity is part of implementing a privacy framework after a gap analysis has been completed?

   • AMapping existing controls to the framework's controls to identify overlaps and missing areas
   • BImmediately training all employees without any planning
   • CDeleting all existing privacy policies to start fresh
   • DSelecting a different framework because the gap analysis revealed too many gaps
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A multinational company with operations in the EU and the US is selecting a privacy framework to guide its global privacy program. The company already has an ISO/IEC 27001-certified information security management system (ISMS) and needs a framework that can extend its existing security controls to privacy while also supporting GDPR compliance. Which framework should the company choose?

   • AA custom framework built from internal policies
   • BISO/IEC 27701
   • CGDPR-oriented framework (e.g., EU GDPR guidelines)
   • DNIST Privacy Framework
   Reveal Solution Discussion Select an answer first
6. 15foundation · easy

   Which of the following is a widely used privacy framework that provides a comprehensive approach to managing privacy risk and is developed by a U.S. government agency?

   • ANIST Privacy Framework
   • BGDPR
   • CCOBIT
   • DISO/IEC 27701
   Reveal Solution Discussion Select an answer first