Discuss IAPP CIPM Exam Topic 6 Question 97

A systems audit uncovered a shared drive folder containing sensitive employee data with no access controls and therefore was available for all employees to view. What is the first step to mitigate further risks?

ANotify all employees whose information was contained in the file.

BCheck access logs to see who accessed the folder.

CNotify legal counsel of a privacy incident.

DRestrict access to the folder.

Suggested Answer: D

Get Premium CIPM Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

26 comments · newest first

Denae 29 days ago

I feel like A is necessary, but only after we secure the folder. D first!

Kimi 1 month ago

C is important too. We need to notify legal about the incident.

Annice 1 month ago

True, but if we don’t restrict access, more people could view it. D is priority.

Rocco 1 month ago

But we should also check access logs first, right? B could help identify who saw it.

Glynda 2 months ago

Agreed, restricting access is essential to prevent further leaks.

Madalyn 2 months ago

I think D is the best choice. Immediate action is crucial.

Amie 2 months ago

It’s a tough call, but D should come first to protect data.

Launa 2 months ago

C is important too. We should inform legal about the breach.

Basilia 2 months ago

True, but if we don’t restrict access, more people could see it.

Danilo 3 months ago

But what about B? We need to know who accessed it first.

Margart 3 months ago

Agreed, restricting access prevents further exposure.

Dottie 3 months ago

I think D is the best option. Immediate action is crucial.

Marge 3 months ago

I disagree, notifying employees first could cause panic.

Alex 3 months ago

Notifying legal counsel should be the priority here.

Solange 3 months ago

Surprised this wasn't caught earlier! How did it even happen?

Pearlene 4 months ago

I think checking access logs is important too.

Brittni 4 months ago

Definitely need to restrict access to the folder first!

Linsey 4 months ago

Agreed, D should be the priority to prevent further leaks!

Roxane 4 months ago

Not sure if notifying all employees is the best first step.

Allene 4 months ago

Wait, how did they not have access controls in the first place?

Aimee 6 months ago

I think C is important too, gotta involve legal.

Katlyn 6 months ago

Definitely D, restricting access is crucial!

Chanel 6 months ago

I agree with restricting access first, but I wonder if notifying employees is also necessary. It feels like there are multiple layers to consider here.

Rosalia 7 months ago

I practiced a similar question where we had to assess risks. I feel like checking access logs could help understand the impact, but it might not be the immediate step.

Jarvis 7 months ago

I'm not entirely sure, but I remember something about notifying legal counsel being important in these situations. Maybe that's a priority too?

Vernice 7 months ago

I think the first step should be to restrict access to the folder. It seems like a basic security measure to prevent further exposure.

IAPP CIPM Exam - Topic 6 Question 97 Discussion