思い立ったらすぐ始めたい、そんな方にぴったりなのがCertShikenのCIPM対策です。お支払い完了後すぐにダウンロードでき、IAPP Certified Information Privacy Manager (CIPM)の学習を今日からスタートできます。

IAPP CIPM 試験概要:

認定ベンダー:	IAPP
試験名:	認定情報プライバシーマネージャー
試験番号:	CIPM
合格点:	300 (換算スコア)
対応言語:	英語
受験料:	USD 550
関連資格:	CIPT CIPP/E CIPP/C CIPP/US
出題数:	90
認定の有効期間:	2年
試験時間:	150 分
試験形式:	選択式
サンプル問題:
受験方法:	Pearson VUEセンターでのコンピュータベース試験、またはオンライン監督付き試験
前提条件:	正式な受験要件はありません。プライバシー管理の経験が推奨されます
公式シラバスのURL:	https://iapp.org/certify/cipm/

IAPP CIPM 試験シラバストピック:

IAPP Certified Information Privacy Manager (CIPM)に関するよくあるご質問

IAPP Certified Information Privacy Manager (CIPM) 認定 CIPM 試験問題：

問題 #1

SCENARIO
Please use the following to answer the next QUESTION:
Paul Daniels, with years of experience as a CEO, is worried about his son Carlton's successful venture, Gadgo. A technological innovator in the communication industry that quickly became profitable, Gadgo has moved beyond its startup phase. While it has retained its vibrant energy, Paul fears that under Carlton's direction, the company may not be taking its risks or obligations as seriously as it needs to. Paul has hired you, a Privacy Consultant, to assess the company and report to both father and son. "Carlton won't listen to me," Paul says, "but he may pay attention to an expert." Gadgo's workplace is a clubhouse for innovation, with games, toys, snacks. espresso machines, giant fish tanks and even an iguana who regards you with little interest. Carlton, too, seems bored as he describes to you the company's procedures and technologies for data protection. It's a loose assemblage of controls, lacking consistency and with plenty of weaknesses. "This is a technology company," Carlton says. "We create. We innovate. I don't want unnecessary measures that will only slow people down and clutter their thoughts." The meeting lasts until early evening. Upon leaving, you walk through the office it looks as if a strong windstorm has recently blown through, with papers scattered across desks and tables and even the floor. A
"cleaning crew" of one teenager is emptying the trash bins. A few computers have been left on for the night, others are missing. Carlton takes note of your attention to this: "Most of my people take their laptops home with them, or use their own tablets or phones. I want them to use whatever helps them to think and be ready day or night for that great insight. It may only come once!" What phase in the Privacy Maturity Model (PMM) does Gadgo's privacy program best exhibit?

A. Repeatable.
B. Defined.
C. Managed.
D. Ad hoc.

問題 #2

SCENARIO
Please use the following lo answer the next question:
The board risk committee of your organization is particularly concerned not only by the number and frequency of data breaches reported to it over the past 12 months, but also the inconsistency in responses and poor incident response turnaround times.
Upon reviewing the current incident response plan (IRP), it was discovered that while the business continuity plan (BCP) had been updated on time, the IRP, linked to BCP. was last updated over three years ago.
The board risk committee has noted this as high risk especially since company policy is to review and update policies and plans annually. Consequently, the newly appointed data protection officer (DPO) was requested to provide a paper on how she would remediate the situation.
As a seasoned data privacy professional, you have been requested to assist the new DPO.
Which additional proactive step listed below would best mitigate these risks in the future?

A. Make sure that everyone listed in the IRP has a copy of the IRP
B. Add comments about incidents to the IRP to record what action was taken.
C. Make the IRP a live document that is evaluated for completeness during each incident.
D. Make copies of the IRP in various place so it can be accessed remotely or when offline.

問題 #3

SCENARIO
Please use the following to answer the next QUESTION:
Perhaps Jack Kelly should have stayed in the U.S. He enjoys a formidable reputation inside the company, Special Handling Shipping, for his work in reforming certain "rogue" offices. Last year, news broke that a police sting operation had revealed a drug ring operating in the Providence, Rhode Island office in the United States. Video from the office's video surveillance cameras leaked to news operations showed a drug exchange between Special Handling staff and undercover officers.
In the wake of this incident, Kelly had been sent to Providence to change the "hands off" culture that upper management believed had let the criminal elements conduct their illicit transactions. After a few weeks under Kelly's direction, the office became a model of efficiency and customer service. Kelly monitored his workers' activities using the same cameras that had recorded the illegal conduct of their former co-workers.
Now Kelly has been charged with turning around the office in Cork, Ireland, another trouble spot. The company has received numerous reports of the staff leaving the office unattended. When Kelly arrived, he found that even when present, the staff often spent their days socializing or conducting personal business on their mobile phones. Again, he observed their behaviors using surveillance cameras. He issued written reprimands to six staff members based on the first day of video alone.
Much to Kelly's surprise and chagrin, he and the company are now under investigation by the Data Protection Commissioner of Ireland for allegedly violating the privacy rights of employees. Kelly was told that the company's license for the cameras listed facility security as their main use, but he does not know why this matters. He has pointed out to his superiors that the company's training programs on privacy protection and data collection mention nothing about surveillance video.
You are a privacy protection consultant, hired by the company to assess this incident, report on the legal and compliance issues, and recommend next steps.
What should you advise this company regarding the status of security cameras at their offices in the United States?

A. Reduce the number of security cameras located inside the building.
B. Set policies about the purpose and use of the security cameras.
C. Restrict access to surveillance video taken by the security cameras and destroy the recordings after a designated period of time.
D. Add security cameras at facilities that are now without them.

問題 #4

You are the privacy officer at a university. Recently, the police have contacted you as they suspect that one of your students is using a library computer to commit financial fraud. The police would like your assistance in investigating this individual and are requesting computer logs and usage data of the student.
What Is your first step in responding to the request?

A. Review policies, procedures and legislation to determine the university's obligation to co-operate with the police.
B. Provide the data to police and record it for your own archives.
C. Contact the university's legal counsel to determine if the request is lawful.
D. Refuse the request as the police do not have a warrant.

問題 #5

A company's human resources (HR) group is working with their information security team lo tag data within their systems as ''special data" or "sensitive data" What is the most probable reason for the group to do so?

A. To prepare for an upcoming regulatory audit under GDPR.
B. To apply the organization's data deletion standard.
C. To create a robust record of processing activities.
D. To ensure the data is fully controlled and used for only authorized purposes.

解説：