Unit 1 Computing 006 ppt

What does APP 11 require organisations to do?

• Share personal information with third parties.

• Take reasonable steps to protect personal information from misuse, interference, and loss, as well as unauthorised access, modification, or disclosure.

• Store personal information indefinitely.

• Delete all personal information after one year.

List three techniques used to protect personal information from unauthorised access.

• Encryption, multi-factor authentication, and regular security audits.

• Sharing passwords, using public Wi-Fi, and ignoring software updates.

• Storing data in plain text, using weak passwords, and disabling firewalls.

• Printing all data and storing it in a physical safe.

How does encryption help protect personal data?

• By making data easily accessible to everyone.

• By converting data into a code to prevent unauthorised access.

• By deleting data automatically after a set period.

• By storing data in a physical location.

Why is multi-factor authentication (MFA) important for data security?

• It allows users to access data without a password.

• It requires multiple forms of verification, making it harder for unauthorised users to access data.

• It simplifies the login process by using a single factor.

• It automatically logs users out after a short period.

What role do security audits play in protecting personal information?

• They help identify vulnerabilities and ensure compliance with security policies.

• They increase the amount of personal information collected.

• They allow for the sharing of personal information with third parties.

• They reduce the need for encryption.

A company collects customer data for a loyalty program. Under APP 6, can they share this data with third-party advertisers? Why or why not?

• Yes, because all data can be shared freely.

• No, because APP 6 restricts the use and disclosure of personal information without consent.

• Yes, if the data is anonymised.

• No, because APP 6 requires data to be deleted immediately.

A school wants to publish student achievement data online. How could they ensure compliance with APP 2?

• By publishing all data without any restrictions.

• By obtaining consent from students or guardians and ensuring data is anonymised.

• By sharing data with third-party advertisers.

• By storing data in a public database.

An organisation experiences a data breach due to weak password policies. Which APP has been violated, and how could this have been prevented?

• APP 1; by collecting less data.

• APP 11; by implementing stronger password policies and multi-factor authentication.

• APP 5; by deleting all data.

• APP 8; by sharing data internationally.

Explain how a business could improve its APP 11 compliance when handling customer payment information.

• By storing payment information in plain text.

• By using encryption, regular security audits, and secure payment gateways.

• By sharing payment information with third parties.

• By ignoring security updates.

What is the primary purpose of APP 11?

• To allow unrestricted access to personal information.

• To ensure personal information is protected from misuse, interference, and loss.

• To mandate the sharing of personal information with government agencies.

• To require the deletion of all personal information after one year.