<< Prev Question Next Question >>

Question 35/90

SCENARIO
Please use the following to answer the next QUESTION:
Amira is thrilled about the sudden expansion of NatGen. As the joint Chief Executive Officer (CEO) with her long-time business partner Sadie, Amira has watched the company grow into a major competitor in the green energy market. The current line of products includes wind turbines, solar energy panels, and equipment for geothermal systems. A talented team of developers means that NatGen's line of products will only continue to grow.
With the expansion, Amira and Sadie have received advice from new senior staff members brought on to help manage the company's growth. One recent suggestion has been to combine the legal and security functions of the company to ensure observance of privacy laws and the company's own privacy policy. This sounds overly complicated to Amira, who wants departments to be able to use, collect, store, and dispose of customer data in ways that will best suit their needs. She does not want administrative oversight and complex structuring to get in the way of people doing innovative work.
Sadie has a similar outlook. The new Chief Information Officer (CIO) has proposed what Sadie believes is an unnecessarily long timetable for designing a new privacy program. She has assured him that NatGen will use the best possible equipment for electronic storage of customer and employee dat a. She simply needs a list of equipment and an estimate of its cost. But the CIO insists that many issues are necessary to consider before the company gets to that stage.
Regardless, Sadie and Amira insist on giving employees space to do their jobs. Both CEOs want to entrust the monitoring of employee policy compliance to low-level managers. Amira and Sadie believe these managers can adjust the company privacy policy according to what works best for their particular departments. NatGen's CEOs know that flexible interpretations of the privacy policy in the name of promoting green energy would be highly unlikely to raise any concerns with their customer base, as long as the data is always used in course of normal business activities.
Perhaps what has been most perplexing to Sadie and Amira has been the CIO's recommendation to institute a privacy compliance hotline. Sadie and Amira have relented on this point, but they hope to compromise by allowing employees to take turns handling reports of privacy policy violations. The implementation will be easy because the employees need no special preparation. They will simply have to document any concerns they hear.
Sadie and Amira are aware that it will be challenging to stay true to their principles and guard against corporate culture strangling creativity and employee morale. They hope that all senior staff will see the benefit of trying a unique approach.
What is the most likely reason the Chief Information Officer (CIO) believes that generating a list of needed IT equipment is NOT adequate?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (90q)
Question 1: SCENARIO Please use the following to answer the next QUESTIO...
Question 2: Integrating privacy requirements into functional areas acros...
Question 3: If your organization has a recurring issue with colleagues n...
Question 4: SCENARIO Please use the following to answer the next QUESTIO...
Question 5: What is the main purpose in notifying data subjects of a dat...
Question 6: In a mobile app for purchasing and selling concert tickets, ...
Question 7: SCENARIO Please use the following to answer the next QUESTIO...
Question 8: What United States federal law requires financial institutio...
Question 9: Under the General Data Protection Regulation (GDPR), when wo...
Question 10: SCENARIO Please use the following to answer the next QUESTIO...
Question 11: SCENARIO Please use the following to answer the next QUESTIO...
Question 12: Which of the following privacy frameworks are legally bindin...
Question 13: "Collection", "access" and "destruction" are aspects of what...
Question 14: What is one reason the European Union has enacted more compr...
Question 15: SCENARIO Please use the following to answer the next QUESTIO...
Question 16: In addition to regulatory requirements and business practice...
Question 17: SCENARIO Please use the following to answer the next QUESTIO...
Question 18: If done correctly, how can a Data Protection Impact Assessme...
Question 19: SCENARIO Please use the following to answer the next QUESTIO...
Question 20: SCENARIO Please use the following to answer the next QUESTIO...
Question 21: SCENARIO Please use the following to answer the next QUESTIO...
Question 22: All of the following are access control measures required by...
Question 23: A new business crafting its privacy policy is struggling wit...
Question 24: SCENARIO Please use the following to answer the next questio...
Question 25: SCENARIO Please use the following to answer the next QUESTIO...
Question 26: Which of the following best supports implementing controls t...
Question 27: SCENARIO Please use the following to answer the next QUESTIO...
Question 28: SCENARIO Please use the following to answer the next QUESTIO...
Question 29: How do privacy audits differ from privacy assessments?...
Question 30: SCENARIO Please use the following to answer the next QUESTIO...
Question 31: SCENARIO Please use the following to answer the next QUESTIO...
Question 32: What is most critical when outsourcing data destruction serv...
Question 33: SCENARIO Please use the following to answer the next QUESTIO...
Question 34: SCENARIO Please use the following to answer the next QUESTIO...
Question 35: SCENARIO Please use the following to answer the next QUESTIO...
Question 36: SCENARIO Please use the following to answer the next QUESTIO...
Question 37: SCENARIO Please use the following to answer the next QUESTIO...
Question 38: Which of the following is NOT recommended for effective Iden...
Question 39: SCENARIO Please use the following to answer the next QUESTIO...
Question 40: The General Data Protection Regulation (GDPR) specifies fine...
Question 41: Under the General Data Protection Regulation (GDPR), which o...
Question 42: SCENARIO Please use the following to answer the next QUESTIO...
Question 43: SCENARIO Please use the following to answer the next QUESTIO...
Question 44: An organization's internal audit team should do all of the f...
Question 45: What is the main function of the Asia-Pacific Economic Coope...
Question 46: Under the General Data Protection Regulation (GDPR), what ar...
Question 47: A systems audit uncovered a shared drive folder containing s...
Question 48: SCENARIO Please use the following to answer the next QUESTIO...
Question 49: When implementing Privacy by Design (PbD), what would NOT be...
Question 50: Which of the following controls does the PCI DSS framework N...
Question 51: SCENARIO Please use the following to answer the next QUESTIO...
Question 52: Which term describes a piece of personal data that alone may...
Question 53: What is the function of the privacy operational life cycle?...
Question 54: All of the following would be answered through the creation ...
Question 55: SCENARIO Please use the following to answer the next QUESTIO...
Question 56: Under the GDPR. when the applicable lawful basis for the pro...
Question 57: An organization's business continuity plan or disaster recov...
Question 58: Which most accurately describes the reasons an organization ...
Question 59: Which of the following is NOT a type of privacy program metr...
Question 60: A minimum requirement for carrying out a Data Protection Imp...
Question 61: SCENARIO Please use the following to answer the next QUESTIO...
Question 62: Formosa International operates in 20 different countries inc...
Question 63: Under the General Data Protection Regulation (GDPR), what mu...
Question 64: SCENARIO Please use the following to answer the next QUESTIO...
Question 65: Which of the following best demonstrates the effectiveness o...
Question 66: SCENARIO Please use the following to answer the next QUESTIO...
Question 67: Which of the following helps build trust with customers and ...
Question 68: In a mobile app for purchasing and selling concert tickets, ...
Question 69: SCENARIO Please use the following to answer the next QUESTIO...
Question 70: What is least likely to be achieved by implementing a Data L...
Question 71: A privacy maturity model provides all of the following EXCEP...
Question 72: SCENARIO Please use the following to answer the next QUESTIO...
Question 73: When supporting the business and data privacy program expand...
Question 74: Which is the best way to view an organization's privacy fram...
Question 75: SCENARIO Please use the following to answer the next QUESTIO...
Question 76: SCENARIO Please use the following to answer the next QUESTIO...
Question 77: All of the following would be recommended for effective iden...
Question 78: SCENARIO Please use the following to answer the next QUESTIO...
Question 79: A minimum requirement for carrying out a Data Protection Imp...
Question 80: SCENARIO Please use the following to answer the next QUESTIO...
Question 81: Incipia Corporation just trained the last of its 300 employe...
Question 82: SCENARIO Please use the following to answer the next QUESTIO...
Question 83: SCENARIO Please use the following to answer the next QUESTIO...
Question 84: Which of the documents below assists the Privacy Manager in ...
Question 85: Data retention and destruction policies should meet all of t...
Question 86: Which of the following is a physical control that can limit ...
Question 87: An organization is establishing a mission statement for its ...
Question 88: SCENARIO Please use the following to answer the next QUESTIO...
Question 89: When building a data privacy program, what is a good startin...
Question 90: SCENARIO Please use the following to answer the next QUESTIO...