ISC2 - CC - Chapter 1 - Module 4

What is governance?

• The laws imposed by the government
• The regulations, standards, policies y procedures accepted worldwide
• How organizations follow protocols imposed by the government
• How organizations make decisions in order to fulfill their purposes

Which governance element comes usually in form of laws?

• Policy
• Standard
• Procedure
• Regulation

Governments can impose financial penalties as a consequence of breaking a:?

• Policy
• Standard
• Procedure
• Regulation

Which regulation provides a framework for the protection of personal data and privacy within the European Union?

• HIPAA
• PCI-DSS
• GDPR
• ISO 27001

Which regulation requires organizations to notify individuals affected by a data breach?

• GDPR
• HIPAA
• ISO 27001
• PCI-DSS

Which regulation requires organizations to establish controls to protect electronic protected health information (ePHI)?

• GDPR
• HIPAA
• ISO 27001
• PCI-DSS

Which regulation is focused on safeguarding healthcare information and sets standards for the privacy and security of patient data?

• GDPR
• HIPAA
• ISO 27001
• PCI-DSS

Which governance element guide organizations to operate with widely accepted best practices?

• Regulations
• Procedures
• Standards
• Policies

Frameworks, often offered by third-party organizations, that cover specific advisory or compliance objectives are:?

• Regulations
• Procedures
• Standards
• Policies

Which standard provides best practices for securing payment card data within the payment card industry?

• ISO 27002
• PCI-DSS
• ISO 27001
• NIST SP 800-53