<< Prev Question Next Question >>

Question 7/89

SCENARIO
Please use the following to answer the next QUESTION:
Henry Home Furnishings has built high-end furniture for nearly forty years. However, the new owner, Anton, has found some degree of disorganization after touring the company headquarters. His uncle Henry had always focused on production - not data processing - and Anton is concerned. In several storage rooms, he has found paper files, disks, and old computers that appear to contain the personal data of current and former employees and customers. Anton knows that a single break-in could irrevocably damage the company's relationship with its loyal customers. He intends to set a goal of guaranteed zero loss of personal information.
To this end, Anton originally planned to place restrictions on who was admitted to the physical premises of the company. However, Kenneth - his uncle's vice president and longtime confidante - wants to hold off on Anton's idea in favor of converting any paper records held at the company to electronic storage. Kenneth believes this process would only take one or two years. Anton likes this idea; he envisions a password- protected system that only he and Kenneth can access.
Anton also plans to divest the company of most of its subsidiaries. Not only will this make his job easier, but it will simplify the management of the stored data. The heads of subsidiaries like the art gallery and kitchenware store down the street will be responsible for their own information management. Then, any unneeded subsidiary data still in Anton's possession can be destroyed within the next few years.
After learning of a recent security incident, Anton realizes that another crucial step will be notifying customers. Kenneth insists that two lost hard drives in Question are not cause for concern; all of the data was encrypted and not sensitive in nature. Anton does not want to take any chances, however. He intends on sending notice letters to all employees and customers to be safe.
Anton must also check for compliance with all legislative, regulatory, and market requirements related to privacy protection. Kenneth oversaw the development of the company's online presence about ten years ago, but Anton is not confident about his understanding of recent online marketing laws. Anton is assigning another trusted employee with a law background the task of the compliance assessment. After a thorough analysis, Anton knows the company should be safe for another five years, at which time he can order another check.
Documentation of this analysis will show auditors due diligence.
Anton has started down a long road toward improved management of the company, but he knows the effort is worth it. Anton wants his uncle's legacy to continue for many years to come.
Which of Anton's plans for improving the data management of the company is most unachievable?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (89q)
Question 1: SCENARIO Please use the following to answer the next QUESTIO...
Question 2: SCENARIO Please use the following to answer the next QUESTIO...
Question 3: SCENARIO Please use the following to answer the next questio...
Question 4: SCENARIO Please use the following to answer the next questio...
Question 5: What is the name for the privacy strategy model that describ...
Question 6: SCENARIO Please use the following to answer the next QUESTIO...
Question 7: SCENARIO Please use the following to answer the next QUESTIO...
Question 8: What is the key factor that lays the foundation for all othe...
Question 9: An executive for a multinational online retail company in th...
Question 10: SCENARIO Please use the following to answer the next questio...
Question 11: SCENARIO Please use the following to answer the next QUESTIO...
Question 12: SCENARIO Please use the following to answer the next questio...
Question 13: Data retention and destruction policies should meet all of t...
Question 14: SCENARIO Please use the following to answer the next QUESTIO...
Question 15: SCENARIO Please use the following to answer the next QUESTIO...
Question 16: SCENARIO Please use the following to answer the next questio...
Question 17: You would like your organization to be independently audited...
Question 18: Which of the following is TRUE about the Data Protection Imp...
Question 19: SCENARIO Please use the following to answer the next QUESTIO...
Question 20: SCENARIO Please use the following to answer the next QUESTIO...
Question 21: SCENARIO Please use the following to answer the next questio...
Question 22: SCENARIO Please use the following to answer the next QUESTIO...
Question 23: SCENARIO Please use the following to answer the next QUESTIO...
Question 24: SCENARIO Please use the following to answer the next QUESTIO...
Question 25: SCENARIO Please use the following to answer the next questio...
Question 26: SCENARIO Please use the following to answer the next questio...
1 commentQuestion 27: In regards to the collection of personal data conducted by a...
1 commentQuestion 28: SCENARIO Please use the following to answer the next QUESTIO...
9 commentQuestion 29: Which is the best way to view an organization's privacy fram...
Question 30: SCENARIO Please use the following to answer the next QUESTIO...
Question 31: SCENARIO Please use the following to answer the next questio...
Question 32: SCENARIO Please use the following to answer the next QUESTIO...
Question 33: SCENARIO Please use the following to answer the next questio...
Question 34: SCENARIO Please use the following to answer the next QUESTIO...
Question 35: SCENARIO Please use the following to answer the next questio...
Question 36: SCENARIO Please use the following to answer the next questio...
Question 37: SCENARIO Please use the following to answer the next QUESTIO...
Question 38: SCENARIO Please use the following to answer the next questio...
Question 39: SCENARIO Please use the following to answer the next QUESTIO...
Question 40: Which term describes a piece of personal data that alone may...
Question 41: Which will best assist you in quickly identifying weaknesses...
Question 42: A systems audit uncovered a shared drive folder containing s...
Question 43: All of the following changes will likely trigger a data inve...
Question 44: An organization's business continuity plan or disaster recov...
Question 45: SCENARIO Please use the following to answer the next QUESTIO...
Question 46: SCENARIO Please use the following to answer the next QUESTIO...
Question 47: SCENARIO Please use the following to answer the next questio...
Question 48: SCENARIO Please use the following to answer the next questio...
Question 49: Which is NOT an influence on the privacy environment externa...
Question 50: SCENARIO Please use the following to answer the next questio...
Question 51: SCENARIO Please use the following to answer the next questio...
Question 52: "Collection," "access" and "destruction" are aspects of what...
Question 53: In a sample metric template, what does "target" mean?...
Question 54: SCENARIO Please use the following to answer the next QUESTIO...
1 commentQuestion 55: SCENARIO Please use the following to answer the next QUESTIO...
Question 56: You would like to better understand how your organization ca...
Question 57: SCENARIO Please use the following to answer the next QUESTIO...
Question 58: Which of the following is NOT a type of privacy program metr...
Question 59: SCENARIO Please use the following to answer the next questio...
Question 60: SCENARIO Please use the following to answer the next QUESTIO...
Question 61: SCENARIO Please use the following to answer the next QUESTIO...
Question 62: SCENARIO Please use the following to answer the next QUESTIO...
Question 63: SCENARIO Please use the following to answer the next QUESTIO...
Question 64: When supporting the business and data privacy program expand...
Question 65: When building a data privacy program, what is a good startin...
Question 66: The General Data Protection Regulation (GDPR) specifies fine...
Question 67: What is one obligation that the General Data Protection Regu...
Question 68: What is the main purpose in notifying data subjects of a dat...
Question 69: While trying to e-mail her manager, an employee has e-mailed...
Question 70: If your organization has a recurring issue with colleagues n...
1 commentQuestion 71: Under the General Data Protection Regulation (GDPR), when wo...
Question 72: SCENARIO Please use the following to answer the next QUESTIO...
Question 73: SCENARIO Please use the following to answer the next questio...
Question 74: Which of the following indicates you have developed the righ...
1 commentQuestion 75: SCENARIO Please use the following to answer the next QUESTIO...
1 commentQuestion 76: Which statement is FALSE regarding the use of technical secu...
Question 77: If done correctly, how can a Data Protection Impact Assessme...
Question 78: For an organization that has just experienced a data breach,...
Question 79: SCENARIO Please use the following to answer the next QUESTIO...
Question 80: What have experts identified as an important trend in privac...
Question 81: SCENARIO Please use the following to answer the next QUESTIO...
Question 82: SCENARIO Please use the following to answer the next questio...
Question 83: There are different forms of monitoring available for organi...
Question 84: An organization is establishing a mission statement for its ...
Question 85: SCENARIO Please use the following to answer the next QUESTIO...
Question 86: SCENARIO Please use the following to answer the next QUESTIO...
Question 87: In addition to regulatory requirements and business practice...
Question 88: SCENARIO Please use the following to answer the next QUESTIO...
Question 89: SCENARIO Please use the following to answer the next QUESTIO...