Quiz: Sensitive Data Handling

1. Which of the following are examples of sensitive data in an organisation?

Untitled multiple choice field

Customer data

Data on number of employees in your organisation

The standard operating procedure of your call centre

FAQs on your website

2. Which of the following are critical questions about the handling of sensitive data?

Untitled multiple choice field

What is considered sensitive data

Where is this data stored

Who has access to the sensitive data

3. Which of the following is NOT recommended to prevent exposure of sensitive data?

Untitled multiple choice field

Sensitive data is never stored in clear text

Store passwords in the database in plain text

The generation of the keys is secure

Do not store any passwords publicly

4. You are in charge of evaluating a vendor who may be able to access certain customer data, what questions are critical to ask?

Untitled multiple choice field

How do you manage the transfer of customer information?

What security measures do you have in place?

How do you encrypt the data?

5. What should you do if you are trying to get customer consent for sending promotional marketing e-mailers?

Untitled multiple choice field

Send promotional e-mailers as long as they have purchased something before

Assume customer consent if they sign up for your mobile app

Assume customer consent if they sign up for a contest online

Ask for explicit customer consent via an opt-in

6. A customer calls your call centre and enquires whether their personal data will still be stored if they withdraw from your service after 6 months. Your call centre is unsure and directs the question to you. What should you do if you are unsure?

Untitled multiple choice field

Check your data storage policy and verify

Answer that it will be removed without first verifying

Tell the customer it will be withdrawn if they request

Refer the customer to the FAQ which is vaguely worded

7. What is the best way to ensure employees are familiar with handling sensitive data?

Untitled multiple choice field

Train employees in handling sensitive data

Appoint 1 person in charge of sensitive data

Do not give employees access to any sensitive data

Ensure all employees follow strict standard operating procedures

8. You printed out some sensitive information and was asked to attend to an urgent matter. Leaving the sensitive information openly on your desk is fine.

Untitled multiple choice field

True

9. Which of the following is a way to avoid breach of sensitive data

Untitled multiple choice field

Not storing any sensitive data

Storing sensitive information in physical copies

Appointing only specific individuals to be able to view the sensitive data

Quiz: Sensitive Data Handling

1. Which of the following are examples of sensitive data in an organisation?

2. Which of the following are critical questions about the handling of sensitive data?

3. Which of the following is NOT recommended to prevent exposure of sensitive data?

4. You are in charge of evaluating a vendor who may be able to access certain customer data, what questions are critical to ask?

5. What should you do if you are trying to get customer consent for sending promotional marketing e-mailers?

6. A customer calls your call centre and enquires whether their personal data will still be stored if they withdraw from your service after 6 months. Your call centre is unsure and directs the question to you. What should you do if you are unsure?

7. What is the best way to ensure employees are familiar with handling sensitive data?

8. You printed out some sensitive information and was asked to attend to an urgent matter. Leaving the sensitive information openly on your desk is fine.

9. Which of the following is a way to avoid breach of sensitive data

10. If a customer calls and asks you about their own personal information, you can give them their information without first verifying their identity.