Q10: How does the UK Online Safety Act 2023 impact cybersecurity laws?

It introduces stricter regulations for online content moderation

Q5: Why is cyber insurance considered controversial in some cases?

Some policies exclude coverage for ransomware payments

Q2: What is the main purpose of the Investigatory Powers Act 2016?

To give law enforcement access to comms data, under certain conditions

Q1: Under the UK’s Computer Misuse Act, which of the following is considered an offence?

Accessing a system without permission, even if no harm is caused

Q4: What legal issue caused a major controversy around Uber’s 2016 data breach?

Uber paid hackers $100,000 to conceal the breach

Q12: Which of the following is a real-world example of a company failing to meet cybersecurity regulations?

British Airways was fined for failing to secure customer payment data

Q9: What is a legal concern with artificial intelligence in cybersecurity?

AI systems can be trained to bypass security measures

Q6: How does the UK NIS Regulations (2018) impact organisations?

It requires essential service providers to implement cybersecurity measures

Q7: Which of the following is a key reason companies struggle with cybersecurity compliance?

Laws and regulations are constantly evolving

Q8: Why do some companies delay reporting data breaches to regulators like the ICO?

They fear reputational damage and financial penalties

Q3: What happens if a company fails to report a cyber breach within the ICO’s required timeframe?

They may face a financial penalty and increased regulatory scrutiny

Q11: Why is data sovereignty an increasing concern in cybersecurity legislation?

Companies must comply with local laws, even when operating internationally

studbud

AEB Unit 5 Day 3 Quiz tm

12 termsStudBud Administration

Imported from external platform

Flashcards12 cardsFPractice quizPHost liveL

Questions 12

Answers

1
Q10: How does the UK Online Safety Act 2023 impact cybersecurity laws?
It removes penalties for companies that fail to protect user data
It allows hackers to operate freely as long as they disclose their methods
It gives unlimited access to personal information for law enforcement
It introduces stricter regulations for online content moderation
2
Q5: Why is cyber insurance considered controversial in some cases?
Some policies exclude coverage for ransomware payments
It forces customers to pay extra fees on their internet bills
It prevents companies from upgrading their security
It is illegal in the UK under GDPR
3
Q2: What is the main purpose of the Investigatory Powers Act 2016?
To give law enforcement access to comms data, under certain conditions
To prevent companies from collecting user data
To impose strict penalties for data breaches
To regulate artificial intelligence in cybersecurity
4
Q1: Under the UK’s Computer Misuse Act, which of the following is considered an offence?
Installing antivirus software without admin approval
Refusing to share a password with your boss
Searching for publicly available cybersecurity reports
Accessing a system without permission, even if no harm is caused
5
Q4: What legal issue caused a major controversy around Uber’s 2016 data breach?
Uber sold user data on the dark web
Uber paid hackers $100,000 to conceal the breach
The company deliberately exposed customer passwords
The company refused to implement GDPR regulations
6
Q12: Which of the following is a real-world example of a company failing to meet cybersecurity regulations?
Facebook was rewarded for leaking user data
Apple was hacked due to withdrawal of its Advanced Data Protection
British Airways was fined for failing to secure customer payment data
Amazon was rewarded for its cybersecurity compliance
7
Q9: What is a legal concern with artificial intelligence in cybersecurity?
AI systems can be trained to bypass security measures
AI-powered software is completely unregulated
It might become sentient and destroy the world!
AI can write its own laws
8
Q6: How does the UK NIS Regulations (2018) impact organisations?
It requires essential service providers to implement cybersecurity measures
It removes the need for compliance audits
It prevents government agencies from conducting penetration tests on you
It allows companies to store personal data indefinitely
9
Q7: Which of the following is a key reason companies struggle with cybersecurity compliance?
Laws and regulations are constantly evolving
The UK government is slow to publish guidance
The severe financial penalties for non-compliance
Cybersecurity is not understood adequately by most organisations
10
Q8: Why do some companies delay reporting data breaches to regulators like the ICO?
They legally have up to 12 months to report incidents
Reporting a breach automatically results in company shutdown
Regulators do not enforce penalties for late reporting
They fear reputational damage and financial penalties
11
Q3: What happens if a company fails to report a cyber breach within the ICO’s required timeframe?
They may face a financial penalty and increased regulatory scrutiny
They are immediately shut down
Nothing happens unless customers file a lawsuit
They must delete all affected customer data
12
Q11: Why is data sovereignty an increasing concern in cybersecurity legislation?
Companies are not required to follow foreign cybersecurity laws
Companies must comply with local laws, even when operating internationally
It allows governments to access all company data at any time
Data must be kept offline to remain legally compliant

AEB Unit 5 Day 3 Quiz tm Flashcards | StudBud