ACCA Strategic Professional · Strategic Business Leader · IT systems security and control
Lumen Telecom wants to launch an app using customer location data. Before design begins, the CIO insists on assessing privacy risks and building in data minimisation and default privacy settings. Which approach does this describe?
This is privacy by design and by default supported by a data protection impact assessment. Privacy risks are assessed before processing starts, and minimisation and protective default settings are built into the system from the outset instead of being added after launch.
- APrivacy by design and by default supported by a data protection impact assessmentCorrect
- BPost-implementation review
- CDisaster recovery planning
- DBusiness process re-engineering
Explanation
Assessing privacy risk before processing (DPIA) and embedding minimisation and protective default settings is privacy by design and by default. A post-implementation review occurs after launch, disaster recovery addresses continuity, and re-engineering redesigns processes for efficiency.
Did you get it right without looking?
One question tells you little. A timed set on IT systems security and control shows your real accuracy, how long you take and where you lose marks.
More IT systems security and control questions
- Halden Logistics has suffered two phishing incidents this year. The board has so far treated cyber security as a technical matter for the IT…
- Altamira Bank's board states that, after a system failure, payment processing must be restored within 2 hours, and that no more than 15 minu…
- Zenith Insurance allows staff to work remotely. The risk committee proposes that access to claims data be granted only after checking user i…
- Delta Foods stores customer records on laptops used by sales staff who travel. The IT director is concerned about the consequences if a lapt…
- Zephyr Insurance needs an alternative site for its claims system. Its tolerable downtime is 4 hours and budget is limited. It rejects a hot …
- Orion Logistics suffers a ransomware attack at 09:00 Monday. By Tuesday 15:00 it confirms that encrypted servers include unencrypted employe…