Program Monitoring and Metrics CDPSE Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which approach is most effective for continuously monitoring privacy program controls?

   • AReviewing privacy policies once a year
   • BCollecting employee feedback on privacy awareness
   • CImplementing automated logging and alerting for key control activities
   • DConducting an annual audit of all privacy controls
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A financial services firm monitors the number of privacy impact assessments (PIAs) completed each quarter. The metric shows a steady decline over the past year. The privacy team suspects this is because project managers are not initiating PIAs for new projects. What is the most appropriate next step to validate this suspicion?

   • AAutomate the PIA process to make it easier for project managers to complete.
   • BIncrease the frequency of reporting on PIA completion to the board of directors.
   • CReview a sample of new projects initiated in the past year to see if PIAs were required but not performed.
   • DChange the metric to track the number of PIAs that are completed on time, rather than the total number completed.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A privacy team is designing a set of metrics for a new privacy program. They want to include a metric that measures the effectiveness of the incident response process. Which metric is most appropriate for this purpose?

   • ANumber of incidents that were detected by automated tools versus manual reporting
   • BPercentage of employees who have completed incident response training
   • CAverage time to contain and remediate a privacy incident
   • DNumber of privacy incidents reported per quarter
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of analyzing metric data over time?

   • ATo calculate the exact cost of every privacy control
   • BTo replace the need for external privacy audits
   • CTo identify trends and patterns that indicate performance changes
   • DTo generate a list of all personal data processing activities
   Reveal Solution Discussion Select an answer first
6. 10foundation · easy

   Which element is essential for making a privacy metric report actionable?

   • AA list of all employees' names
   • BA copy of the full privacy policy
   • CA detailed explanation of every metric's formula
   • DA recommendation for corrective action or further investigation
   Reveal Solution Discussion Select an answer first