Certbie
Question 1 of 30
Aurora Analytics, a multinational corporation specializing in data-driven marketing solutions, is embarking on a project to develop a new customer relationship management (CRM) platform. Given the stringent requirements of GDPR and the company\'s commitment to ISO 27701 compliance, the Chief Information Security Officer (CISO), Javier Rodriguez, is tasked with ensuring that privacy is a core consideration throughout the platform\'s development lifecycle. Javier recognizes that reactive measures, such as addressing privacy issues only after the platform is built, would be costly and ineffective. He needs to implement a strategy that proactively integrates privacy into the CRM platform from its initial design phase. Which approach best embodies Javier\'s objective of embedding privacy into the very fabric of the CRM platform, aligning with the principles of data protection by design and by default, and ensuring ongoing compliance with privacy regulations like GDPR?
Implementing a comprehensive privacy program that integrates privacy considerations into the system's design from the outset, conducting Privacy Impact Assessments (PIAs) early in the development process, adopting privacy-enhancing technologies (PETs), and implementing privacy-by-default settings to minimize data collection and maximize data protection throughout the CRM platform's lifecycle.
Conducting regular penetration testing and vulnerability assessments on the CRM platform after it has been fully developed and deployed, focusing on identifying and remediating security flaws that could potentially expose personal data to unauthorized access or breaches.
Developing a detailed incident response plan that outlines the steps to be taken in the event of a data breach affecting the CRM platform, including procedures for notifying affected data subjects and regulatory authorities within the mandated timeframes specified by GDPR.
Establishing a data governance committee responsible for defining data retention policies, access controls, and data quality standards for the CRM platform, ensuring that data is managed in accordance with internal policies and regulatory requirements.

Preparing for ISO 14044:2006 Internal Auditor? Now land the interview.

73% of qualified candidates get rejected because of weak resumes. Build an ATS-optimized, recruiter-ready resume in under 5 minutes - free to start.

Build My Resume Free