<< Prev Question Next Question >>

Question 4/94

SCENARIO
Please use the following to answer the next QUESTION:
For 15 years, Albert has worked at Treasure Box - a mail order company in the United States (U.S.) that used to sell decorative candles around the world, but has recently decided to limit its shipments to customers in the 48 contiguous states. Despite his years of experience, Albert is often overlooked for managerial positions. His frustration about not being promoted, coupled with his recent interest in issues of privacy protection, have motivated Albert to be an agent of positive change.
He will soon interview for a newly advertised position, and during the interview, Albert plans on making executives aware of lapses in the company's privacy program. He feels certain he will be rewarded with a promotion for preventing negative consequences resulting from the company's outdated policies and procedures.
For example, Albert has learned about the AICPA (American Institute of Certified Public Accountans)/CICA (Canadian Institute of Chartered Accountants) Privacy Maturity Model (PMM). Albert thinks the model is a useful way to measure Treasure Box's ability to protect personal dat a. Albert has noticed that Treasure Box fails to meet the requirements of the highest level of maturity of this model; at his interview, Albert will pledge to assist the company with meeting this level in order to provide customers with the most rigorous security available.
Albert does want to show a positive outlook during his interview. He intends to praise the company's commitment to the security of customer and employee personal data against external threats. However, Albert worries about the high turnover rate within the company, particularly in the area of direct phone marketing. He sees many unfamiliar faces every day who are hired to do the marketing, and he often hears complaints in the lunch room regarding long hours and low pay, as well as what seems to be flagrant disregard for company procedures.
In addition, Treasure Box has had two recent security incidents. The company has responded to the incidents with internal audits and updates to security safeguards. However, profits still seem to be affected and anecdotal evidence indicates that many people still harbor mistrust. Albert wants to help the company recover. He knows there is at least one incident the public in unaware of, although Albert does not know the details. He believes the company's insistence on keeping the incident a secret could be a further detriment to its reputation. One further way that Albert wants to help Treasure Box regain its stature is by creating a toll-free number for customers, as well as a more efficient procedure for responding to customer concerns by postal mail.
In addition to his suggestions for improvement, Albert believes that his knowledge of the company's recent business maneuvers will also impress the interviewers. For example, Albert is aware of the company's intention to acquire a medical supply company in the coming weeks.
With his forward thinking, Albert hopes to convince the managers who will be interviewing him that he is right for the job.
The company may start to earn back the trust of its customer base by following Albert's suggestion regarding which handling procedure?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (94q)
Question 1: SCENARIO Please use the following to answer the next QUESTIO...
Question 2: SCENARIO Please use the following to answer the next questio...
Question 3: Which of the following is TRUE about a PIA (Privacy Impact A...
Question 4: SCENARIO Please use the following to answer the next QUESTIO...
Question 5: SCENARIO Please use the following to answer the next questio...
Question 6: SCENARIO Please use the following to answer the next QUESTIO...
Question 7: In regards to the collection of personal data conducted by a...
Question 8: Formosa International operates in 20 different countries inc...
Question 9: Under the General Data Protection Regulation (GDPR), which s...
Question 10: SCENARIO Please use the following to answer the next QUESTIO...
Question 11: SCENARIO Please use the following to answer the next QUESTIO...
Question 12: SCENARIO Please use the following to answer the next QUESTIO...
Question 13: What United States federal law requires financial institutio...
Question 14: SCENARIO Please use the following to answer the next questio...
Question 15: SCENARIO Please use the following to answer the next questio...
Question 16: SCENARIO Please use the following to answer the next QUESTIO...
Question 17: For an organization that has just experienced a data breach,...
Question 18: SCENARIO Please use the following to answer the next QUESTIO...
Question 19: Which of the following is NOT a type of privacy program metr...
Question 20: SCENARIO Please use the following to answer the next questio...
Question 21: Read the following steps: * Perform frequent data back-ups. ...
Question 22: SCENARIO Please use the following to answer the next QUESTIO...
Question 23: SCENARIO Please use the following to answer the next QUESTIO...
Question 24: SCENARIO Please use the following to answer the next QUESTIO...
Question 25: Which is the best way to view an organization's privacy fram...
Question 26: Under the General Data Protection Regulation (GDPR), what mu...
Question 27: SCENARIO Please use the following to answer the next questio...
Question 28: How are individual program needs and specific organizational...
Question 29: Data retention and destruction policies should meet all of t...
Question 30: "Collection," "access" and "destruction" are aspects of what...
Question 31: SCENARIO Please use the following to answer the next QUESTIO...
Question 32: SCENARIO Please use the following to answer the next QUESTIO...
Question 33: SCENARIO Please use the following to answer the next questio...
Question 34: A Human Resources director at a company reported that a lapt...
Question 35: "Respond" in the privacy operational lifecycle includes whic...
Question 36: SCENARIO Please use the following to answer the next QUESTIO...
Question 37: What are you doing if you succumb to "overgeneralization" wh...
Question 38: SCENARIO Please use the following to answer the next QUESTIO...
Question 39: What is a key feature of the privacy metric template adapted...
Question 40: Which of the following is an example of Privacy by Design (P...
Question 41: SCENARIO Please use the following to answer the next QUESTIO...
Question 42: SCENARIO Please use the following to answer the next questio...
Question 43: Why were the nongovernmental privacy organizations, Electron...
Question 44: SCENARIO Please use the following to answer the next questio...
Question 45: SCENARIO Please use the following to answer the next questio...
Question 46: SCENARIO Please use the following to answer the next QUESTIO...
Question 47: SCENARIO Please use the following to answer the next questio...
Question 48: SCENARIO Please use the following to answer the next QUESTIO...
Question 49: SCENARIO Please use the following to answer the next QUESTIO...
Question 50: SCENARIO Please use the following to answer the next questio...
Question 51: SCENARIO Please use the following to answer the next QUESTIO...
Question 52: Which statement is FALSE regarding the use of technical secu...
Question 53: SCENARIO Please use the following to answer the next QUESTIO...
Question 54: SCENARIO Please use the following to answer the next questio...
Question 55: Which is NOT an influence on the privacy environment externa...
Question 56: SCENARIO Please use the following to answer the next questio...
Question 57: Which of the following indicates you have developed the righ...
Question 58: Which is TRUE about the scope and authority of data protecti...
Question 59: What is least likely to be achieved by implementing a Data L...
Question 60: SCENARIO Please use the following to answer the next QUESTIO...
Question 61: What is one obligation that the General Data Protection Regu...
Question 62: What is the main reason to begin with 3-5 key metrics during...
Question 63: SCENARIO Please use the following to answer the next questio...
Question 64: When devising effective employee policies to address a parti...
Question 65: Which of the documents below assists the Privacy Manager in ...
Question 66: As a Data Protection Officer, one of your roles entails moni...
Question 67: In a sample metric template, what does "target" mean?...
Question 68: SCENARIO Please use the following to answer the next QUESTIO...
Question 69: SCENARIO Please use the following to answer the next questio...
Question 70: SCENARIO Please use the following to answer the next QUESTIO...
Question 71: What is the main purpose of a privacy program audit?...
Question 72: SCENARIO Please use the following to answer the next questio...
Question 73: SCENARIO Please use the following to answer the next QUESTIO...
Question 74: SCENARIO Please use the following to answer the next questio...
Question 75: SCENARIO Please use the following to answer the next questio...
Question 76: Incipia Corporation just trained the last of its 300 employe...
Question 77: SCENARIO Please use the following to answer the next questio...
Question 78: SCENARIO Please use the following to answer the next QUESTIO...
Question 79: SCENARIO Please use the following to answer the next questio...
Question 80: SCENARIO Please use the following to answer the next questio...
Question 81: SCENARIO Please use the following to answer the next QUESTIO...
Question 82: What is the main function of the Asia-Pacific Economic Coope...
Question 83: SCENARIO Please use the following to answer the next questio...
Question 84: SCENARIO Please use the following to answer the next questio...
Question 85: SCENARIO Please use the following to answer the next QUESTIO...
Question 86: SCENARIO Please use the following to answer the next questio...
Question 87: Which of the following indicates you have developed the righ...
Question 88: SCENARIO Please use the following to answer the next QUESTIO...
Question 89: SCENARIO Please use the following to answer the next QUESTIO...
Question 90: There are different forms of monitoring available for organi...
Question 91: Under which circumstances would people who work in human res...
Question 92: SCENARIO Please use the following to answer the next questio...
Question 93: The General Data Protection Regulation (GDPR) specifies fine...
Question 94: SCENARIO Please use the following to answer the next questio...