S1M2

Question 1

Two types of data breaches

Answer 1

Unintentional
Intentional

Question 2

Covered members as it relates to HIPPA

Answer 2

Health care provider
Health Plans
Health Care Clearing House
Business associates who need to access records for a covered entity

Question 3

Three types of safeguards and examples of each

Answer 3

Administrative safeguard - assigning security responsibility, workforce security, security awareness training
Physical safeguards - facility access controls, workstation use and security. device and media control
Technical safeguards - access control, audit control, data integrity control

Question 4

Who does GDPR apply to

Answer 4

Data processors in the EU
Data processors outside of the EU if they provide goods and services to those in the EU
Data processors outside of the EU but where EU applies via public international law

Question 5

6 principles of GDPR

Answer 5

Lawfulness
Accuracy
Integrity
Data minimalization
Storage Limitation
Purpose Limitation

Question 6

6 goals of PCI DSS

Answer 6

Build secure network
Protect Data
Vulnerability management
Implement strong controls
Regularly monitor system
Maintain secure policies