nerdexam
IAPP

CIPM · Question #252

While trying to e-mail her manager, an employee has e-mailed a list of all the company's customers, including their bank details, to an employee with the same name at a different company. Which of…

The correct answer is B. Containment of impact of breach. See the full explanation below for the reasoning.

Question

While trying to e-mail her manager, an employee has e-mailed a list of all the company's customers, including their bank details, to an employee with the same name at a different company. Which of the following would be the first stage in the incident response plan under the General Data Protection Regulation (GDPR)?

Options

  • ANotification to data subjects.
  • BContainment of impact of breach.
  • CRemediation offers to data subjects.
  • DNotification to the Information Commissioner's Office (ICO).

How the community answered

(35 responses)
  • A
    14% (5)
  • B
    77% (27)
  • C
    6% (2)
  • D
    3% (1)

Community Discussion

No community discussion yet for this question.

Full CIPM Practice