vmartinez

 

You receive a text message on your personal device from your manager stating that they cannot access the company’s secured online database. They’re updating the company’s monthly party schedule and need another employee’s birth date right away. Your organization’s policies and procedures state that employee information should never be accessed or shared through personal communication channels. What should you do?

 

• Request identification from your manager to ensure the text message is authentic; then, provide the birth date.
• Respectfully decline, then remind your manager of the organization’s guidelines.
• Give your manager the employee’s birth date; a party is a friendly gesture.
• Ask your manager to provide proof of their inability to access the database.

 

 

Fill in the blank: Privacy protection means safeguarding _____ from unauthorized use.

 

• business networks
• personal information
• documentation
• compliance processes

 

 

An employee trained to handle PII and SPII leaves confidential patient information unlocked in a public area. Which ethical principles does this violate? Select all that apply.

 

• Confidentiality

• Laws

• Privacy protections

• Remaining unbiased

 

 

Security teams use the NIST Cybersecurity Framework (CSF) as a baseline to manage short and long-term risk.

 

• True

 

• False

 

 

What is a foundational model that informs how organizations consider risk when setting up systems and security policies?

 

• Cybersecurity Framework (CSF)
• Sensitive personally identifiable information (SPII)
• Confidentiality, integrity, and availability (CIA) triad
• General Data Protection Regulation law (GDPR)

 

 

An organization requires its employees to complete a new data privacy training program each year to reduce the risk of a data breach. What is this training requirement an example of?

 

• Security control

• Data confidentiality
• Cybersecurity Framework (CSF)
• Personally identifiable information (PII)