Group Compliance Quiz

Which of the followings are the internal consequence management of breach the management of customer information?

• Show Cause Letter

• Increment every year

• Promotion

• Change Department

Which of the following is NOT classified as Customer information Breach? 

• Identity card numbers

• Addresses

• Financial Information

• Vehicle plate Number

Which party is NOT to be reported to upon Customer Information Breach?

• Group Compliance and Group Risk

• Board of Directors

• Bank Negara Malaysia

• Group IT

Report to an enforcement agency e.g. PDRM has to be made should fraud element is involved in the Customer Information Breach cases.

• TRUE

• FALSE

Who should be responsible to safeguard the customer information from any thief, misuse and unauthorised modification?

• All staff of Bank

• Senior Management

• Staff only

• Group Compliance Division

Customer's information is referred to as:

"Any information relating to the affairs or, in particular, the account, of any particular customer of the bank in whatever form including in the form of a record, book, register, correspondence, other document or material."

• TRUE

• FALSE

Any person in relation to the customer, i.e. spouse, parents, children etc. are the persons to whom the customer’s documents or information may be disclosed with.

• TRUE

• FALSE

Exerting undue pressure or influence on any customer to acquire the Bank's products or services is considered as FAIR treatment to the customer.

• TRUE

• FALSE

Staff who handles the customer information is considered to have UNUSUAL BEHAVIOUR should the staff:

(i) has access to customers’ information in the system;

(ii) have unique passwords;

(iii) changes the password frequently;

(iv) does not share the password; and

(v) does not expose the password out in the open.

• TRUE

• FALSE

All personal data must be processed in accordance with the principle set out in PDPA.

• TRUE

• FALSE