Font size
WorksheetsWIX3003 Information Management
Total questions: 17
Worksheet time: 8mins
Information is classified according to
its value
its colour
its envelope
impact of security breaches
The Malaysian government has the following security level classification of information:
Constrained
Secret
Restricted
Confidential
Physical information can be labelled with
barcode
QR code
RFID tag
tag team
In US classified documents, a "NOFORN" label, as shown here, means that the document
is not related to national security
is provided for foreign intelligence agencies
is not to be viewed by any non-US citizen
comes from HYDRA
Examples of handling classified information include
storing in colour-coded folders
placing the document on the table at the canteen while ordering food at counter
sending documents in double envelopes
storing document in fire-proof vault
PII is
person information identification
person identification of information
personally identifiable information
personally indentation information
PII is information that is only directly linked to a person
Correct inspector Saab
No no no...
Examples of PII include
full name
employee's salary
the colour of the rainbow
medical history
According to the ISO 21900, the processing of PII should be minimised
Correct
Nonsense!
According to ISO 29100, a PII principal is
any information that can be used to identify the PII principal to whom such information relates
privacy stakeholder that processes PII on behalf of and in accordance with the instructions of a PII controller
natural person to whom the personally identifiable information (PII) relates
set of attributes which make it possible to identify the personally identifiable information principal
According to the ISO 29100,
we should limit how a PII is used
collection of PII should be limited
PII can be disclosed to any external party without restrictions
PII principal should provide consent to use PII
Transforming information into unintelligible form via a secret key is called
(a)
The process depicted in the figure is called
(a)
After masking is done for a column in a table, we can still differentiate between one masked value and the other
No, you can't do that!
Of course you can. It's not rocket science you know
The Personal Data Protection Act (PDPA) does not apply to federal and state governments
Yes
No, it applies to everyone
Disposal of sensitive physical information can be done via
incineration
shredding
Mjolnir
an external service provider providing such service
2 + 5 * 5 =
(a)
