<< Prev Question Next Question >>

Question 12/64

SCENARIO
Tom looked forward to starting his new position with a U.S -based automobile leasing company (New Company), now operating in 32 states. New Company was recently formed through the merger of two prominent players, one from the eastern region (East Company) and one from the western region (West Company). Tom, a Certified Information Privacy Technologist (CIPT), is New Company's first Information Privacy and Security Officer. He met today with Dick from East Company, and Harry, from West Company.
Dick and Harry are veteran senior information privacy and security professionals at their respective companies, and continue to lead the east and west divisions of New Company. The purpose of the meeting was to conduct a SWOT (strengths/weaknesses/opportunities/threats) analysis for New Company. Their SWOT analysis conclusions are summarized below.
Dick was enthusiastic about an opportunity for the New Company to reduce costs and increase computing power and flexibility through cloud services. East Company had been contemplating moving to the cloud, but West Company already had a vendor that was providing it with software-as-a-service (SaaS). Dick was looking forward to extending this service to the eastern region. Harry noted that this was a threat as well, because West Company had to rely on the third party to protect its data.
Tom mentioned that neither of the legacy companies had sufficient data storage space to meet the projected growth of New Company, which he saw as a weakness. Tom stated that one of the team's first projects would be to construct a consolidated New Company data warehouse. Tom would personally lead this project and would be held accountable if information was modified during transmission to or during storage in the new data warehouse.
Tom, Dick and Harry agreed that employee network access could be considered both a strength and a weakness. East Company and West Company had strong performance records in this regard; both had robust network access controls that were working as designed. However, during a projected year-long transition period, New Company employees would need to be able to connect to a New Company network while retaining access to the East Company and West Company networks.
Which statement is correct about addressing New Company stakeholders' expectations for privacy?

LEAVE A REPLY

Your email address will not be published. Required fields are marked *

Question List (64q)
Question 1: Which of the following is an example of direct marketing tha...
Question 2: What is the function of the privacy operational life cycle?...
Question 3: SCENARIO Please use the following to answer the next questio...
Question 4: An unforeseen power outage results in company Z's lack of ac...
Question 5: SCENARIO Please use the following to answer the next QUESTIO...
Question 6: Which was NOT one of the five priority areas listed by the F...
Question 7: Which is the best way to view an organization's privacy fram...
Question 8: In which of the following cases, cited as an example by a WP...
Question 9: SCENARIO Please use the following to answer the next questio...
Question 10: Which is TRUE about the scope and authority of data protecti...
Question 11: SCENARIO Please use the following to answer the next questio...
Question 12: SCENARIO Tom looked forward to starting his new position wit...
Question 13: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 14: Which of the following is NOT a role of works councils?...
Question 15: WP29's "Guidelines on Personal data breach notification unde...
Question 16: If a multi-national company wanted to conduct background che...
Question 17: In which of the following cases would an organization MOST L...
Question 18: A key component of the OECD Guidelines is the "Individual Pa...
Question 19: In 2016's Guidance, the United Kingdom's Information Commiss...
Question 20: Read the following steps: * Discover which employees are acc...
Question 21: A company is hesitating between Binding Corporate Rules and ...
Question 22: Which GDPR requirement will present the most significant cha...
Question 23: When would a data subject NOT be able to exercise the right ...
Question 24: How is the retention of communications traffic data for law ...
Question 25: SCENARIO Please use the following to answer the next questio...
Question 26: A German data subject was the victim of an embarrassing pran...
Question 27: Which of the following would require designating a data prot...
Question 28: Company X has entrusted the processing of their payroll data...
Question 29: What should a controller do after a data subject opts out of...
Question 30: To which of the following parties does the territorial scope...
Question 31: Which sentence BEST summarizes the concepts of "fairness," "...
Question 32: SCENARIO Please use the following to answer the next questio...
Question 33: Which marketing-related activity is least likely to be cover...
Question 34: In the event of a data breach, which type of information are...
Question 35: SCENARIO Looking back at your first two years as the Directo...
Question 36: What is the MAIN reason GDPR Article 4(22) establishes the c...
Question 37: In which of the following situations would an individual mos...
Question 38: SCENARIO Please use the following to answer the next questio...
Question 39: SCENARIO Looking back at your first two years as the Directo...
Question 40: According to the GDPR, how is pseudonymous personal data def...
Question 41: How does the GDPR now define "processing"?...
Question 42: Article 9 of the GDPR lists exceptions to the general prohib...
Question 43: What is one major goal that the OECD Guidelines, Convention ...
Question 44: SCENARIO Please use the following to answer the next questio...
Question 45: A U.S.-based online shop uses sophisticated software to trac...
Question 46: Why is advisable to avoid consent as a legal basis for an em...
Question 47: Which change was introduced by the 2009 amendments to the e-...
Question 48: Which aspect of the GDPR will likely have the most impact on...
Question 49: What practice does the USA FREEDOM Act NOT authorize?...
Question 50: SCENARIO Please use the following to answer the next questio...
Question 51: A well-known video production company, based in Spain but sp...
Question 52: SCENARIO Please use the following to answer the next questio...
Question 53: SCENARIO Please use the following to answer the next questio...
Question 54: SCENARIO Please use the following to answer the next questio...
Question 55: After leaving the EU under the terms of Brexit, the United K...
Question 56: SCENARIO Please use the following to answer the next questio...
Question 57: SCENARIO Please use the following to answer the next questio...
Question 58: SCENARIO WebTracker Limited is a cloud-based online marketin...
Question 59: Article 5(1)(b) of the GDPR states that personal data must b...
Question 60: SCENARIO Please use the following to answer the next questio...
Question 61: Under what circumstances would the GDPR apply to personal da...
Question 62: SCENARIO Please use the following to answer the next questio...
Question 63: SCENARIO Please use the following to answer the next questio...
Question 64: What obligation does a data controller or processor have aft...