Which of the following provides the BEST assurance that a potential vendor is able to comply with privacy regulations and the organization's data privacy policy?

• A.Including mandatory compliance language in the request for proposal (RFP)
• B.Obtaining self-attestations from all candidate vendors
• C.Requiring candidate vendors to provide documentation of privacy processes
• D.Conducting a risk assessment of all candidate vendors

Comment: *

Name: *

Email: *

Verification: *

Which of the following is MOST important to capture in the audit log of an application hosting personal data?

• A.Server details of the hosting environment
• B.Last user who accessed personal data
• C.Application error events
• D.Last logins of privileged users

Comment: *

Name: *

Email: *

Verification: *

Which of the following is the best reason for a health organization to use desktop virtualization to implement stronger access control to systems containing patient records?

• A.Limited functions and capabilities of a secured operating environment
• B.Monitored network activities for unauthorized use
• C.Improved data integrity and reduced effort for privacy audits
• D.Unlimited functionalities and highly secured applications

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST ensures an organization's data retention requirements will be met in the public cloud environment?

• A.Data classification schemes
• B.Automated data deletion schedules
• C.Cloud vendor agreements
• D.Service level agreements (SLAs)

Comment: *

Name: *

Email: *

Verification: *

Which of the following BEST ensures a mobile application implementation will meet an organization's data security standards?

• A.User acceptance testing (UAT)
• B.Data classification
• C.Privacy impact assessment (PIA)
• D.Automatic dynamic code scan

Comment: *

Name: *

Email: *

Verification: *