Quiz: Sensitive Data Handling

1. Which of the following are examples of sensitive data in an organisation?

A

Customer data

B

Data on number of employees in your organisation

C

The standard operating procedure of your call centre

D

FAQs on your website

2. Which of the following are critical questions about the handling of sensitive data?

A

What is considered sensitive data

B

Where is this data stored

C

Who has access to the sensitive data

D

All of the above

3. Which of the following is NOT recommended to prevent exposure of sensitive data?

A

Sensitive data is never stored in clear text

B

Store passwords in the database in plain text

C

The generation of the keys is secure

D

Do not store any passwords publicly

4. You are in charge of evaluating a vendor who may be able to access certain customer data, what questions are critical to ask?

A

How do you manage the transfer of customer information?

B

What security measures do you have in place?

C

How do you encrypt the data?

D

All of the above

5. What should you do if you are trying to get customer consent for sending promotional marketing e-mailers?

A

Send promotional e-mailers as long as they have purchased something before

B

Assume customer consent if they sign up for your mobile app

C

Assume customer consent if they sign up for a contest online

D

Ask for explicit customer consent via an opt-in

6. A customer calls your call centre and enquires whether their personal data will still be stored if they withdraw from your service after 6 months. Your call centre is unsure and directs the question to you. What should you do if you are unsure?

6. A customer calls your call centre and enquires whether their personal data will still be stored if they withdraw from your service after 6 months. Your call centre is unsure and directs the question to you. What should you do if you are unsure?

A

Check your data storage policy and verify

B

Answer that it will be removed without first verifying

C

Tell the customer it will be withdrawn if they request

D

Refer the customer to the FAQ which is vaguely worded

7. What is the best way to ensure employees are familiar with handling sensitive data?

A

Train employees in handling sensitive data

B

Appoint 1 person in charge of sensitive data

C

Do not give employees access to any sensitive data

D

Ensure all employees follow strict standard operating procedures

8. You printed out some sensitive information and was asked to attend to an urgent matter. Leaving the sensitive information openly on your desk is fine.

A

True

B

False

9. Which of the following is a way to avoid breach of sensitive data

A

Not storing any sensitive data

B

Strong encryption

C

Storing sensitive information in physical copies

D

Appointing only specific individuals to be able to view the sensitive data

10. If a customer calls and asks you about their own personal information, you can give them their information without first verifying their identity.

A

True

B

False