Question
What should a tester do to verify DLP controls?
Tap to flip
Answer
Attempt to exfiltrate test data and see if it is blocked.
Tap to flip back
Question
Why is the right-to-erasure test important?
Tap to flip
Answer
It confirms data is removed within the required timeframe.
Tap to flip back
Question
What is the key vendor-control step for personal data processors?
Tap to flip
Answer
Use a data processing agreement.
Tap to flip back
Question
Why must personal data have a retention schedule?
Tap to flip
Answer
To ensure secure disposal when no longer needed.
Tap to flip back