Isaca CDPSE Exam Dumps

Any organization collecting information about EU residents is required to operate with transparency in collecting and using their personal information. Chapter III of the GDPR defines eight data subject rights that have become foundational for other privacy regulations around the world:

Right to access personal data. Data subjects can access the data collected on them.

One of the privacy requirements related to the rights of data subjects is the right to access, which means that individuals have the right to obtain a copy of their personal data, as well as information about how their data is processed, by whom, for what purposes, and for how long. To meet this requirement, an organization's technology stack should incorporate features that allow individuals to have direct access to their data, such as self-service portals, dashboards, or applications. This way, individuals can exercise their right to access without relying on intermediaries or manual processes, which can be inefficient, error-prone, or insecure.Reference:: CDPSE Review Manual (Digital Version), page 137

Recovery point objective (RPO) is the maximum amount of data that can be lost or corrupted before it affects the ability to restore the normal operations of a business. RPO is measured by the time interval between the last valid backup and the occurrence of a data privacy incident. A lower RPO means less data loss and faster recovery, while a higher RPO means more data loss and slower recovery. Therefore, RPO is the most important consideration to ensure the ability to restore availability and access to personal data in the event of a data privacy incident, because it determines how frequently and thoroughly the personal data should be backed up and protected.

IT Disaster Recovery Plan, Ready.gov

Understanding data backup, recovery, and business continuity, Leverage ITC

Business Continuity & Disaster Recovery Planning (BCP & DRP), Imperva

The best practice to protect data privacy when disposing removable backup media is B. Data sanitization.

A comprehensive explanation is:

Data sanitization is the process of permanently and irreversibly erasing or destroying the data on a storage device or media, such as a hard drive, a USB drive, a CD/DVD, etc. Data sanitization ensures that the data cannot be recovered or reconstructed by any means, even by using specialized software or hardware tools. Data sanitization is also known as data wiping, data erasure, data destruction, or data disposal.

Data sanitization is the best practice to protect data privacy when disposing removable backup media because it prevents unauthorized access, disclosure, theft, or misuse of the sensitive or confidential data that may be stored on the medi

a. Data sanitization also helps to comply with the legal and regulatory requirements and standards for data protection and privacy, such as the General Data Protection Regulation (GDPR), the Health Insurance Portability and Accountability Act (HIPAA), the Payment Card Industry Data Security Standard (PCI DSS), etc.

There are different methods and techniques for data sanitization, depending on the type and format of the storage device or media. Some of the common methods are:

Overwriting: Overwriting replaces the existing data on the device or media with random or meaningless data, such as zeros, ones, or patterns. Overwriting can be done multiple times to increase the level of security and assurance. Overwriting is suitable for magnetic media, such as hard disk drives (HDDs) or tapes.

Degaussing: Degaussing exposes the device or media to a strong magnetic field that disrupts and destroys the magnetic structure and alignment of the data. Degaussing renders the device or media unusable and unreadable. Degaussing is suitable for magnetic media, such as hard disk drives (HDDs) or tapes.

Physical Destruction: Physical destruction involves applying physical force or damage to the device or media that breaks it into small pieces or shreds it. Physical destruction can be done by using mechanical tools, such as shredders, crushers, drills, hammers, etc., or by using thermal methods, such as incineration, melting, etc. Physical destruction is suitable for any type of media, such as hard disk drives (HDDs), solid state drives (SSDs), USB drives, CDs/DVDs, etc.

Data encryption (A) is not a good practice to protect data privacy when disposing removable backup media because it does not erase or destroy the data on the media. Data encryption only transforms the data into an unreadable format that can only be accessed with a key or a password. However, if the key or password is lost, stolen, compromised, or guessed by an attacker, the data can still be decrypted and exposed. Data encryption is more suitable for protecting data in transit or at rest, but not for disposing data.

Data scrambling is not a good practice to protect data privacy when disposing removable backup media because it does not erase or destroy the data on the media. Data scrambling only rearranges the order of the bits or bytes of the data to make it appear random or meaningless. However, if the algorithm or pattern of scrambling is known or discovered by an attacker, the data can still be unscrambled and restored. Data scrambling is more suitable for obfuscating data for testing or debugging purposes, but not for disposing data.

Data masking (D) is not a good practice to protect data privacy when disposing removable backup media because it does not erase or destroy the data on the media. Data masking only replaces some parts of the data with fictitious or anonymized values to hide its true identity or meaning. However, if the original data is still stored somewhere else or if the masking technique is weak or reversible by an attacker, the data can still be unmasked and revealed. Data masking is more suitable for protecting data in use or in analysis, but not for disposing data.

What Is Data Sanitization?1

How to securely erase hard drives (HDDs) and solid state drives (SSDs)2

Secure Data Disposal & Destruction: 6 Methods to Follow3

Before using data from the organization's customer database for a new marketing application, the first step should be to determine what data is required by the application and for what purpose. This will help to ensure that the data collection and processing are relevant, necessary, and proportionate to the intended use, and that the data minimization principle is followed.Data minimization means that only the minimum amount of personal data needed to achieve a specific purpose should be collected and processed, and that any excess or irrelevant data should be deleted or anonymized1.This will also help to comply with the data privacy laws and regulations that apply to the organization, such as the General Data Protection Regulation (GDPR) or the California Consumer Privacy Act (CCPA), which require organizations to inform data subjects about the types and purposes of data processing, and to obtain their consent if needed23.

ISACA, Data Privacy Audit/Assurance Program, Control Objective 2: Data Minimization, p.61

ISACA, GDPR Data Protection Impact Assessments, p.4-52

ISACA, CCPA vs. GDPR: Similarities and Differences, p.1-23

Authentication is a process of verifying the identity of a user or device that requests access to a system or resource. Authentication can be based on one or more factors, such as something the user knows (e.g., password), something the user has (e.g., token), something the user is (e.g., fingerprint) or something the user does (e.g., signature). When an organization requires a photo on a government-issued identification card to validate an in-person credit card purchase, it is using possession factor authentication, which relies on something the user has as proof of identity.The other options are not applicable in this scenario1, p.81Reference:1: CDPSE Review Manual (Digital Version)