Impacts of legislation

European Union GDPR is responsible for

• collection and storage of data

• securing the end-user computers

• collection and use of public funds

• securing the computer network

The Canada's PIPEDA enforces 10 standard principles for collection and access to personal data. Which one of the following is not part of the ten principles ?

• Accountability

• Consent

• Limiting collection

• free public access

What is the purpose of Sarbanes-Oxley Act 2002 ?

• protect data that is processed, transmitted and stored during electronic payment transactions

• mandates practices in financial record keeping and reporting

• supervises institutions across banking, insurance and superannuation and promotes financial system stability

• develop and drive adoption of data security standards and resources for safe payments worldwide

What is the purpose of APRA ?

• protect data that is processed, transmitted and stored during electronic payment transactions

• mandates practices in financial record keeping and reporting

• supervises institutions across banking, insurance and superannuation and promotes financial system stability

• develop and drive adoption of data security standards and resources for safe payments worldwide

Which one of the following in NOT a part of the PCI-DSS pillars of strategic framework ?

• Increase industry participation and knowledge

• Evolve security standards and validation

• Secure emerging payment channels

• Detect and safeguard PHI from anticipated threats

• Increase standards alignment and consistency

The My __________ Records Act 2012 enables the establishment and operation of a voluntary national system for the protection of access to health information relating to recipients of healthcare.

The Australian Signals Directorate's Information Security Manual (ISM) mandates the ___________ of my health records.

• confidentiality and classification

• integrity and availability

• access control and authenticity

• durability and reliability

Frameworks provide insights on how to address business risks, deploy best practices and control risks. Which one of the following is an example of a framework ?

• ASIC

• Malware

• AICD

• Essential 8

There are many regulatory bodies that work closely with government to ensure that compliance with the laws is assessed and regulated. Which one of the following is an example of such a body ?

• ATO

• AISA

• ISM

• PSPF

The SOC2 standard establishes _______ services addressed by five semi-overlapping categories of principles.