Privacy Requirements & Threats - 3 & 4

Question 1

What does NVD stand for?

Accepted Answer

National Vulnerability Database

Question 2

What contribution has ISO made to privacy standards?

Accepted Answer

Standards ISO 27701 & 27018 focused on privacy management and cloud PII.

Question 3

What is a key focus of ISF's methodology?

Accepted Answer

Supply chain

Question 4

What does FERPA protect?

Accepted Answer

Educational records

Question 5

What is unanticipated revelation?

Accepted Answer

Unexpected PII disclosure

Question 6

Which law relates to financial privacy?

Accepted Answer

GLBA

Question 7

What is distortion in data actions?

Accepted Answer

Misrepresentation of PII

Question 8

Describe four categories of information that may relate to individuals.

Accepted Answer

PII, De-Identified PII, Anonymous personal info, Group information

Question 9

What is a privacy harm?

Accepted Answer

Adverse experience from PII processing

Question 10

What is appropriation of PII?

Accepted Answer

Unauthorized use of PII

Question 11

Explain the distinction between sensitive PII and non-sensitive PII.

Accepted Answer

Sensitive PII has a higher impact of release

Question 12

Which ISO standard is about cloud-based PII?

Accepted Answer

ISO 27018

Question 13

What is repurposing collected data?

Accepted Answer

Using data for new purposes

Question 14

What is CVSS used for?

Accepted Answer

Ranking vulnerabilities

Question 15

Explain the purpose of the ISF Standard of Good Practice for Information Security.

Accepted Answer

Investigate & resolve key issues and develop risk management methodologies.

Question 16

What is a physical vulnerability?

Accepted Answer

Access control

Question 17

True or false: Privacy harm is always intentional.

Accepted Answer

False

Question 18

What impacts systems storing PII?

Accepted Answer

Information processing threats

Question 19

What are the GDPR definition of personal data?

Accepted Answer

Any data that can be used to identify an individual

Question 20

What is information collection threat?

Accepted Answer

Threat during PII transfer

Question 21

What is unannounced acquisition?

Accepted Answer

Unaware of disclosure

Question 22

Which is a privacy vulnerability category?

Accepted Answer

Technical

Question 23

What is the National Vulnerability Database and the Common Vulnerability Scoring System?

Accepted Answer

NVD – List of known technical vulns in HW & SW, CVSS – Ranking and classification system for vulnerabilities, Covers security and privacy and many types of devices, Describes clearly the impact and severity of an exploit

Question 24

What is re-identification, and how is it accomplished?

Accepted Answer

Reestablishment of the relationship between PII and Deidentified data

Question 25

Describe the FIPPs defined by OECD.

Accepted Answer

Limitation, Data quality, Purpose, Limited use, Controls, Accountable

Question 26

What is a major aspect of ISF's focus?

Accepted Answer

Holistic approach

Question 27

What is ISO 27701 focused on?

Accepted Answer

Privacy information management

Question 28

What is the ISF Standard of Good Practice for?

Accepted Answer

Cybersecurity and risk management

Question 29

What is a dataset vulnerability?

Accepted Answer

Improper deidentification

Question 30

True or False: GDPR is a US law.

Accepted Answer

False

Question 31

List some of the major privacy-related laws in the United States.

Accepted Answer

HIPAA, COPPA, GLBA, FERPA, ECPA

Privacy Requirements & Threats - 3 & 4

Questions 31

Privacy Requirements & Threats - 3 & 4

Questions 31