Client GDPR and Protecting Information Quiz Play Pause Unmute MuteDo you know the GDPR laws? Is your businesses following GDPR and protecting information correctly? Answer the questions below to find out…Cyber Security - GDPR and Protecting Information Your Company Name*Name* First Last Your email address* You are walking into a shop when you see a memory stick on the floor. What should you do?*Ignore it, because it would be stealing to pick it upFormat and run a virus scan on it before using itTake it home and use it for personal informationTake it home and use it for non-sensitive informationHow must data always be processed?*In a data centre to ensure availability at all timesWith consent from the data sellerLawfully, fairly, and in a transparent mannerElectronically and in a digital formatYou must exercise your right to [?], if you want to move data that you provided to a new service provider.*portabilityaccessdeletionconsentUnder the GDPR, what should be considered when processing personal data?*How much data can be stored on the system, and whether cloud services will be requiredHow long it will take to collect and process the dataWhether the data subject cares about the processing of their personal dataThe impact on the rights and freedoms of the data subjectWhen should you use software to lock your computer screen?*When I'm not actually typing anythingWhen it is shut down and safely storedWhen I am typing confidential informationWhen it is not in useUnder the GDPR, which is a right you have as a 'data subject'?*The right to have access to my informationThe right to be paid for my informationThe right to move my information to the cloudThe right to sell my informationThe GDPR only applies to organizations that...*offer social networking platforms.offer products or services into the EU.process hardcopy personal data.charge fees for their products or services.What is an impact of losing a removable device containing sensitive company information?*The security patches on my computer will not be kept up to date.The company will have to update the anti-virus software on all computers.Criminals will be able to install malware programmes on my computer.The company may be fined by a regulator for the loss of information.What is the main risk if you don't handle confidential information properly?*The information could be destroyed.The information could be incorrect.The information could be difficult to find.The information could be stolen.You want to transfer some data at work using a USB stick. What should you do?*Only use a USB stick for transferring non-confidential informationOnly use a USB stick that has been provided by the IT departmentOnly use a USB stick that has no other data on itOnly use a USB stick that I have purchased myselfHow should customer information be handled?*In accordance with company rulesLike any other piece of informationWith enough care not to destroy itBy encrypting it at all timesWhat is the GDPR?*The rules governing a financial transactionA data protection lawA guidance for driverless carsA data deletion softwareHow should you use a USB stick securely?*Only use one that has been used several times before, as it will be safeOnly use one that has been purchased from an approved supplierOnly use one with a capacity that is just large enough to store the information you want to put on itOnly use an approved one that has been provided by your employerYou have encrypted some customer data that you are going to send to another office. How should you send the password?*I should text the password to the email recipient.I should include the password in the email with the confidential data.I should send the password in a separate email to the confidential data.The email with the data should tell the other office to phone me and ask for the passwordIn what situation must data controllers NOT retain data?*When the data processor has changed and has been replaced by a new processorWhen money can't be made from the data anymoreWhen the data is more than 10 years oldWhen there is no legal obligation, or the data is no longer requiredWhich statement about downloading security patches is correct?*It is essential, because it protects your personal informationIt is not effective, because your data may be stolen anyway.It is a waste of time and money, because previous versions work fine.It is not essential, because it is fine to wait for the next release.You just bought a new mobile phone and put your data on it. What should you do with your old phone to protect your personal information?*I should check that I did not forget to transfer any of my personal information from it to the new phoneI should keep it stored in a safe place until the personal information on it is out of date.I should sell it on a trustworthy auction site because it will only be purchased by a trustworthy person.I should make sure that my personal information is permanently removed using a memory wipe utility or factory reset functionUnder the GDPR, in which situation can a data controller process personal data?*When the data processor wants to send out marketing emailsWhen there is a legal obligation to process the dataWhen the data controller is interested in processing personal dataWhen the data needs to be transferred to a third partyWhich of these is a risk that might be caused by exposing your personal information on the internet?*My reputation could be affectedI might not be able to log inNetwork failureApplication errorsWhich is the BEST way of securing sensitive information stored on removable devices?*Keep the removable device wrapped in protective materialCheck the data on the device regularly to make sure it is completePassword protect and encrypt the data on the removable deviceOnly use the device once so that it won't be overused and damagedWhich is an example of sensitive personal information?*My nameMy date of birthMy job titleMy work addressIf your personal information is stolen, you...*may be the victim of fraud.cannot change your password.cannot prove your identity.may forget your password.An organization processing your data must ensure that your data...*is anonymized.is always saved in the cloud and encrypted.is always processed lawfully.is shared with other companies.What type of information would have a very low impact if it was leaked to criminals?*The business case for a new productThe content of marketing brochuresThe names and addresses of customersThe company's internal phone bookAgreement - Your data will be retained for the anonomised purpose of statistical analysis* I agreeNameThis field is for validation purposes and should be left unchanged.