Discuss Isaca CDPSE Exam Topic 10 Question 66

Which of the following should be done FIRST to establish privacy to design when developing a contact-tracing application?

AConduct a privacy impact assessment (PIA).

BConduct a development environment review.

CIdentify privacy controls for the application.

DIdentify differential privacy techniques.

Suggested Answer: A

Conducting a privacy impact assessment (PIA) should be done first to establish privacy by design when developing a contact-tracing application. A PIA is a systematic process that identifies and evaluates the potential effects of personal data processing operations on the privacy of individuals and the organization. A PIA helps to identify privacy risks and mitigation strategies at an early stage of development and ensures compliance with legal and regulatory requirements. Conducting a development environment review, identifying privacy controls, or identifying differential privacy techniques are important steps in privacy by design, but they should be done after conducting a PIA.Reference:CDPSE Exam Content Outline, Domain 2, Task 2.1

Get Premium CDPSE Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

28 comments · newest first

Gracia 10 months ago

Not sure if A is the best choice here...

Miesha 10 months ago

I think C should come before A.

Marti 10 months ago

Totally agree with A, it's crucial!

Merlyn 10 months ago

Surprised that A isn't a given!

Luther 11 months ago

A is definitely the first step!

Earlean 11 months ago

Differential privacy techniques sound important, but I don't think they should come first. I feel like a PIA is definitely the way to go.

Rikki 11 months ago

I’m leaning towards identifying privacy controls as the first step, but I could be mixing it up with another question we did.

Tequila 11 months ago

I remember a practice question where we had to identify privacy controls first, but I feel like a PIA might be more foundational.

Michael 12 months ago

I think the first step should be conducting a privacy impact assessment, but I'm not entirely sure if that's the right order.

Sue 12 months ago

Differential privacy techniques could be really important for a contact-tracing app, so I'd start by looking into those options.

Stephaine 12 months ago

From what I remember, the key is to identify the appropriate privacy controls for the application. That seems like the logical first step to me.

Kenneth 1 year ago

Hmm, I'm not sure. Shouldn't we first review the development environment to ensure it's secure and set up properly for privacy?

Maddie 1 year ago

I think the first step would be to conduct a privacy impact assessment (PIA) to identify any potential privacy risks and how to mitigate them.

Keith 1 year ago

Privacy controls, schmaivacy controls. I just want to know who's been in contact with who. The rest is just red tape, am I right?

Billy 1 year ago

↳ replying to Keith

Privacy is important to protect user data.

Leontine 1 year ago

↳ replying to Keith

C) Identify privacy controls for the application.

Melissa 1 year ago

↳ replying to Keith

A) Conduct a privacy impact assessment (PIA).

Vanda 1 year ago

Differential privacy techniques? Sounds like we're trying to crack the Enigma code or something. Keep it simple, folks!

Lai 1 year ago

Development environment review? Nah, that's putting the cart before the horse. Privacy comes first in contact tracing!

Patti 1 year ago

↳ replying to Lai

C) Identify privacy controls for the application.

Tommy 1 year ago

↳ replying to Lai

A) Conduct a privacy impact assessment (PIA).

Teri 1 year ago

I think identifying privacy controls for the application should come first to establish privacy.

Shawnda 1 year ago

I agree with Lavonna. It's important to assess the privacy impact before anything else.

Lavonna 1 year ago

I think the first step should be conducting a privacy impact assessment (PIA).

Domitila 1 year ago

A privacy impact assessment should definitely be the first step. Gotta cover those privacy bases, you know?

Silvana 1 year ago

↳ replying to Domitila

C) Identify privacy controls for the application.

Izetta 1 year ago

↳ replying to Domitila

Absolutely, that's the first thing to do to ensure privacy.

Carlton 1 year ago

↳ replying to Domitila

A) Conduct a privacy impact assessment (PIA).

Isaca CDPSE Exam - Topic 10 Question 66 Discussion