IAPP CIPP / US Certified Information Privacy Professional Study Guide

Chapter 4Information Management

THE CIPP/US EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE:

• Domain I. Introduction to the U.S. Privacy Environment
  • I.C Information Management from a U.S. Perspective
    • I.C.a. Data sharing and transfers
    • I.C.d Incident response programs
    • I.C.e Workforce training
    • I.C.g Data retention and disposal
    • I.C.j Vendor management

Protecting personal information requires careful management of that data. Organizations must be aware of all of the business processes and storage locations that handle private information in order to implement appropriate security and privacy controls. The design of appropriate controls also requires a clear understanding of the risks facing sensitive information in the modern cybersecurity ...