A key principle of an effective privacy policy is that it should be? A. Written in enough detail to cover the majority of likely scenarios. B. Made general enough to maximize flexibility in its application. C. Presented with external parties as the intended audience. D. Designed primarily by the organization’s lawyers.

SCENARIO Carol was a U.S.-based glassmaker who sold her work at art festivals. She kept things simple by only accepting cash and personal checks. As business grew, Carol couldn’t keep up with demand, and traveling to festivals became burdensome. Carol opened a small boutique and hired Sam to run it while she worked in the […]

Which of the following is considered a client-side IT risk? A. Security policies focus solely on internal corporate obligations. B. An organization increases the number of applications on its server. C. An employee stores his personal information on his company laptop. D. IDs used to avoid the use of personal data map to personal data […]

What would be an example of an organization transferring the risks associated with a data breach? A. Using a third-party service to process credit card transactions. B. Encrypting sensitive personal data during collection and storage C. Purchasing insurance to cover the organization in case of a breach. D. Applying industry standard data handling practices to […]