Drill #6

Question 1

Compliance

Answer 1

The action of meeting requirements of accepted practices, specific standards, laws, prescribed rules and regulations, or terms of a contract.

Question 2

KCM GRC

Answer 2

KnowBe4 Compliance Management, “Governance, Risk and Compliance”

project management and organization tool for risk and compliance projects.

Question 3

protected health information

Answer 3

All recorded information about an individual’s health status, including their health care coverage.

Question 4

personally identifiable information (PII)

Answer 4

Any information that can be used to identify, contact, or locate a single person.

Question 5

PCI DSS

Answer 5

(Payment Card Industry Data Security Standard) A document published by Payment Card Industry. The publication lists all requirements for securely handling credit cards and credit card information.
Organizations who accept credit cards must be PCI compliant. One of the requirements includes security awareness training.

Question 6

HIPAA

Answer 6

(Health Insurance Portability and Accountability Act) A law that requires healthcare organizations to protect personal health information (PHI).

Question 7

GDPR

Answer 7

(General Data Protection Regulation) A regulation in European Union (EU) law on data protection and privacy for all individuals in the EU.