Domain 5: Governance, Risk, and Compliance

Question 1

What is risk management?

Answer 1

Risk management is the process of identifying, assessing, and mitigating risks to an organization’s assets, operations, and data.

Question 2

What is a security policy?

Answer 2

A security policy is a formal document that outlines an organization’s security expectations, responsibilities, and requirements.

Question 3

What is GDPR (General Data Protection Regulation)?

Answer 3

GDPR is a regulation in the European Union that governs data protection and privacy for individuals, requiring organizations to protect personal data and uphold privacy rights.

Question 4

What is PCI DSS (Payment Card Industry Data Security Standard)?

Answer 4

PCI DSS is a set of security standards designed to protect cardholder data and ensure the secure processing, storage, and transmission of credit card information.

Question 5

What is data classification?

Answer 5

Data classification is the process of categorizing data based on its sensitivity and criticality to the organization, determining the level of protection required.