Discuss IAPP CIPP/A Exam Topic 1 Question 20

In Hong Kong's revised Breach Guidance Note of 2015, what course of action did the Commissioner recommend that companies take immediately after experiencing a breach?

AProceed under the assumption that the breach is a threat to personal safety.

BEnlist the aid of law enforcement to determine the cause of the breach.

CQuickly issue a notification to the data subjects affected by the breach.

DImmediately gather essential information in relation to the breach.

Suggested Answer: B

https://www.pcpd.org.hk/english/resources_centre/publications/files/ DataBreachHandling2015_e.pdf

Get Premium CIPP/A Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

14 comments · newest first

Franchesca 1 year ago

Surprised they didn't prioritize personal safety more!

Marylyn 1 year ago

I thought they’d suggest involving law enforcement first.

Lyndia 1 year ago

Totally agree, quick notifications are key!

Staci 1 year ago

Wait, isn't that a bit too reactive?

Anna 1 year ago

The Commissioner said to gather essential info right away!

Kenia 1 year ago

I vaguely recall that law enforcement involvement was mentioned, but I can't remember if it was an immediate action or something that comes later. Was that option B?

Hannah 1 year ago

I feel like we discussed the need to assess threats to safety first, which might point to option A, but I’m not completely confident.

Aron 1 year ago

I remember something about notifying affected individuals quickly, but I’m not sure if that was the first step. Could it be option C?

Jina 1 year ago

I think the Commissioner emphasized the importance of gathering information right away, so maybe it's option D?

Tomas 1 year ago

This is a tough one, but I'm going to give it my best shot. I'll start by eliminating any options that I'm confident are incorrect, then try to reason through the remaining choices.

Verda 1 year ago

This looks like a tricky one. I'm not sure if I should go with the internal audit reports or the risk assessments. Hmm, maybe I should think about the threat models too.

Hermila 1 year ago

Ah, I think I've got it! Configuring an AS path prepend on the peer to ASN 4567 should do the trick and make that link the preferred path.

Alesia 1 year ago

Okay, I've got this. The answer is 0750 - that gives the owner full access, the group read and list access, and no access for others.

Talia 1 year ago

I'm a bit confused by this one. I know tracing analysis is used for performance, but I'm not certain if it's specifically for distributed applications. I'll have to guess on this one.

IAPP CIPP/A Exam - Topic 1 Question 20 Discussion