Discuss IAPP CIPM Exam Topic 2 Question 95

SCENARIO

Please use the following lo answer the next QUESTIO N:

The board risk committee of your organization is particularly concerned not only by the number and frequency of data breaches reported to it over the past 12 months, but also the inconsistency in responses and poor incident response turnaround times.

Upon reviewing the current incident response plan (IRP), it was discovered that while the business continuity plan (BCP) had been updated on time, the IRP, linked to BCP. was last updated over three years ago.

The board risk committee has noted this as high risk especially since company policy is to review and update policies and plans annually. Consequently, the newly appointed data protection officer (DPO) was requested to provide a paper on how she would remediate the situation.

As a seasoned data privacy professional, you have been requested to assist the new DPO.

Which additional proactive step listed below would best mitigate these risks in the future?

AMake the IRP a live document that is evaluated for completeness during each incident.

BMake copies of the IRP in various place so it can be accessed remotely or when offline.

CAdd comments about incidents to the IRP to record what action was taken.

DMake sure that everyone listed in the IRP has a copy of the IRP

Suggested Answer: A

Get Premium CIPM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

31 comments · newest first

Juan 1 month ago

Agreed, but A is more proactive overall.

Kyoko 1 month ago

C is good too, for learning from past incidents.

Van 1 month ago

A could prevent confusion in real-time.

Clay 2 months ago

True, but D ensures everyone knows their role.

Kyoko 2 months ago

But if it’s not updated, it won’t help.

Van 2 months ago

I prefer D. Everyone needs access.

Juan 2 months ago

It keeps the IRP updated during incidents.

Clay 2 months ago

Why A?

Juan 3 months ago

I think A is the best choice.

Josephine 3 months ago

C is useful for learning, but A is stronger.

Darrin 3 months ago

B could help too, but not as effective.

Noel 3 months ago

I agree, A makes sense. Always updated!

Stephen 3 months ago

I think A is the best choice. Keeps it relevant.

Delsie 3 months ago

C could help, but it’s reactive. A is proactive.

Corrie 4 months ago

B is important too, but not as effective as A.

Otis 4 months ago

I agree, A makes sense. We need real-time updates.

Novella 4 months ago

I think A is the best choice. Keeps it current.

Stevie 4 months ago

B) doesn't really solve the problem, just makes it accessible.

Luisa 4 months ago

C) is a good idea too, documenting actions helps with future incidents.

Ciara 6 months ago

Surprised the IRP hasn't been updated in 3 years! That's risky.

Kanisha 6 months ago

I disagree, D) seems more practical. Everyone needs access!

Jeniffer 6 months ago

A) is the best choice! Keeping it live is crucial.

Stevie 6 months ago

D) is essential, everyone needs to be on the same page.

Mitsue 6 months ago

Wait, how did the IRP go three years without an update? That's wild!

Lashaunda 7 months ago

C) is a good idea too, but it won't solve the main issue.

Gregoria 7 months ago

I don't know, B) seems more practical for accessibility.

Vernice 7 months ago

A) is the best choice! Keeping it updated is crucial.

Charolette 7 months ago

I recall that making the IRP a live document was emphasized in our last session. It might help with the turnaround times, but I’m not entirely clear on how that would work in practice.

Wilda 7 months ago

Adding comments about incidents sounds familiar. I feel like it could help track improvements, but I’m not confident it addresses the root of the problem.

Carma 7 months ago

I think we had a practice question about ensuring everyone has access to the IRP. It seems crucial, but I wonder if just having copies is enough.

Mitsue 8 months ago

I remember we discussed the importance of keeping the IRP updated regularly, but I'm not sure if making it a live document is the best approach.

IAPP CIPM Exam - Topic 2 Question 95 Discussion