Question 2An organization requires its employees to complete a new data privacy training program each year to reduce the risk of a data breach. What is this training requirement an example of?1 pointPersonally identifiable information (PII)Data confidentialitySecurity controlCybersecurity Framework (CSF)

1.Question 1Fill in the blank: A security _____ is a set of guidelines used for building plans to help mitigate risk and threats to data and privacy.1 pointlifecyclecontrolregulationframework2.Question 2An organization requires its employees to complete a new data privacy training program each year to reduce the risk of a data breach. What is this training requirement an example of?1 pointCybersecurity Framework (CSF)Security controlPersonally identifiable information (PII)Data confidentiality

1.Question 1An employee trained to handle PII and SPII leaves confidential patient information unlocked in a public area. Which ethical principles does this violate? Select all that apply.1 pointLawsRemaining unbiasedConfidentialityPrivacy protections2.Question 2Fill in the blank: Privacy protection means safeguarding _____ from unauthorized use.1 pointcompliance processesbusiness networksdocumentationpersonal information

6.Question 6An organization is creating an information security training program. What first step would you recommend when designing the training experience?1 pointIdentify how to measure successSet a training budgetConduct a training needs analysisSelect a training delivery method

Question 4A security professional is asked to teach employees how to avoid inadvertently revealing sensitive data. What type of training should they conduct?1 pointTraining about security architectureTraining about network optimizationTraining about business continuityTraining about social engineering

1.Question 1What is the National Institute of Standards and Technology (NIST) Cybersecurity Framework (CSF)?1 pointA required business framework for ensuring security updates and repairs are successfulA collection of security principles focused on maintaining confidentiality, integrity, and availabilityA set of security controls that help analysts determine what to do if a data breach occursStandards, guidelines, and best practices that organizations follow voluntarily in order to manage cybersecurity risk