IAPP
CIPM · Question #136
If your organization has a recurring issue with colleagues not reporting personal data breaches, all of the following are advisable to do EXCEPT?
The correct answer is D. Distribute a phishing exercise to all employees to test their ability to recognize a threat attempt. See the full explanation below for the reasoning.
Question
If your organization has a recurring issue with colleagues not reporting personal data breaches, all of the following are advisable to do EXCEPT?
Options
- ACarry out a root cause analysis on each breach to understand why the incident happened.
- BCommunicate to everyone that breaches must be reported and how they should be reported.
- CProvide role-specific training to areas where breaches are happening so they are more aware.
- DDistribute a phishing exercise to all employees to test their ability to recognize a threat attempt.
How the community answered
(25 responses)- A12% (3)
- B4% (1)
- C4% (1)
- D80% (20)
Community Discussion
No community discussion yet for this question.