Study. uk . com
  1. Home
  2. All questions
  3. Question 21

CISSP study material · question 21 of 500

A privacy lead is scoping a programme against the federal guide to protecting personally identifiable information and must set the steering committee's expectations about the guide's actual reach. Which statements correctly describe its scope? Choose two.

  1. It asks organisations to prepare response plans for incidents involving personally identifiable information.
  2. It sets availability targets for systems processing personally identifiable information at each impact level.
  3. It defines the contract clauses required before personally identifiable information is shared with a processor.
  4. It addresses the confidentiality of personally identifiable information and leaves integrity and availability aside.
Show the answer

Answer: D. It addresses the confidentiality of personally identifiable information and leaves integrity and availability aside.
A. It asks organisations to prepare response plans for incidents involving personally identifiable information.

The guide is deliberately confidentiality-only and reaches into breach preparation; availability targets fall outside it, which is the boundary candidates most often over-read.

Source: NIST SP 800-122 (NIST) — SP 800-122 > Abstract

Challenge yourself on this topic → Study as cards