Privacy Training and Awareness CDPSE Practice Questions (Page 4)

Questions 16–20

1. 16application · medium

   After implementing a new privacy training program, the privacy officer wants to measure its effectiveness. The program includes e-learning modules and workshops. The officer needs to demonstrate to auditors that the training is working. Which combination of metrics would provide the most meaningful evidence of effectiveness?

   • ACollect employee satisfaction scores immediately after each training session.
   • BTrack completion rates and the number of training sessions attended.
   • CReview training materials to ensure they cover all required topics, and confirm that the training is mandatory.
   • DAdminister pre- and post-training assessments to measure knowledge gain, and monitor privacy incident reports and data handling errors over time.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   During a regulatory audit, the auditor asks for evidence that the company's privacy training program is effective and that employees have completed required training. The company has been conducting annual training for three years. Which documentation would best satisfy the auditor's request?

   • ACopies of the training slides and a list of employees who attended the most recent session.
   • BA certificate of completion signed by the privacy officer, stating that all employees have completed the training.
   • CA summary report of training completion rates for the current year, broken down by department.
   • DA record of training completion for each employee, including dates, assessment scores, and any refresher training, along with an analysis of how training has reduced privacy incidents.
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A retail company has completed its annual privacy training, but the privacy team notices that employees still frequently mishandle customer data, such as leaving printed receipts at shared printers. The team wants to reinforce training and promote a culture of privacy. Which initiative would be most effective?

   • AImplement a strict policy that requires employees to shred all printed documents, with disciplinary action for violations.
   • BIncrease the frequency of the annual training to twice a year, but keep the same content.
   • CSend a one-time email reminding employees to be careful with printed documents.
   • DLaunch a monthly privacy awareness campaign that includes tips, posters, and short videos, and pair it with a 'privacy champion' program in each department.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Why is it important to regularly update privacy training content?

   • ATo ensure that employees are reminded of the training requirements on a regular basis
   • BTo reduce the frequency of training sessions needed for employees
   • CTo increase the length of the training to demonstrate thoroughness to regulators
   • DTo reflect changes in laws, technologies, and organizational practices that may affect privacy obligations
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A privacy officer is preparing for an audit. The auditor requests evidence that the company's privacy training program is effective and that training records are maintained. The company has a learning management system (LMS) that tracks completion, but it does not store assessment scores or feedback. What should the privacy officer do to best prepare for the audit?

   • AProvide only the LMS completion reports, as they demonstrate that training was delivered.
   • BProvide the auditor with the LMS completion reports, and supplement them with a summary of assessment scores and feedback collected separately.
   • CExplain to the auditor that the LMS does not store assessment scores, and provide a verbal assurance that the training is effective.
   • DCreate a new spreadsheet with estimated assessment scores and feedback, and provide it to the auditor.
   Reveal Solution Discussion Select an answer first