nerdexam
IAPP

CIPP-E · Question #66

Read the following steps: Discover which employees are accessing cloud services and from which devices and apps Lock down the data in those apps and devices Monitor and analyze the apps and devices…

The correct answer is C. Maintain a secure Bring Your Own Device (BYOD) program. The steps listed in the question are part of a best practice framework for implementing a secure BYOD program, which allows employees to use their personal devices to access organizational data and applications. A BYOD program poses significant privacy and security risks, such…

Compliance with European Data Protection Law

Question

Read the following steps:

Discover which employees are accessing cloud services and from which devices and apps Lock down the data in those apps and devices Monitor and analyze the apps and devices for compliance Manage application life cycles Monitor data sharing An organization should perform these steps to do which of the following?

Options

  • APursue a GDPR-compliant Privacy by Design process.
  • BInstitute a GDPR-compliant employee monitoring process.
  • CMaintain a secure Bring Your Own Device (BYOD) program.
  • DEnsure cloud vendors are complying with internal data use policies.

How the community answered

(43 responses)
  • A
    16% (7)
  • B
    7% (3)
  • C
    72% (31)
  • D
    5% (2)

Explanation

The steps listed in the question are part of a best practice framework for implementing a secure BYOD program, which allows employees to use their personal devices to access organizational data and applications. A BYOD program poses significant privacy and security risks, such as data leakage, unauthorized access, malware infection, and compliance violations. Therefore, an organization should follow a comprehensive approach to discover, monitor, manage, and secure the devices, apps, and data involved in a BYOD program. This approach can help the organization meet the GDPR requirements for data protection by design and by default, data security, accountability, and data breach notification.

Topics

#BYOD#cloud services#employee monitoring#device management

Community Discussion

No community discussion yet for this question.

Full CIPP-E Practice