Computer and Information Security Handbook, 3rd Edition

Chapter 54: Personal Privacy Policies

Review Questions/Exercises

True/False

1. False

2. True

3. True

4. True

5. True

Multiple Choice

1. D

2. C

3. C

4. B

5. D

Exercise

Solution

The following is a partial exercise solution. The students should be able to expand on the following:

When providing copies of information for others, do employees make sure that nonessential information is removed and that personally identifiable information that has no relevance to the transaction is either removed or masked?

Are employees trained never to leave computer terminals unattended when personally identifiable information is on the screen?

Do you use password-activated screen-saver programs?

Are all employees who handle personal information—including temporary, backup, and contract ...