IAPP CIPP / US Certified Information Privacy Professional Study Guide, 2nd Edition

Chapter 4Information Management

THE CIPP/US EXAM OBJECTIVES COVERED IN THIS CHAPTER INCLUDE:

• Domain I. Introduction to the U.S. Privacy Environment
  • I.C Information Management from a U.S. Perspective
    • I.C.a. Data Sharing and Transfers
    • I.C.d Incident Response Programs
    • I.C.e Workforce Training
    • I.C.g Data and Records Retention and Disposal (FACTA)
    • I.C.j Vendor Management

Protecting personal information requires careful management of that data. Organizations must be aware of all of the business processes and storage locations that handle private information in order to implement appropriate security and privacy controls. The design of appropriate controls also requires a clear understanding of the risks facing sensitive information in the modern cybersecurity landscape.

In this chapter, you will learn about the fundamental practices of data governance, including building a data inventory, appropriately classifying sensitive information, and implementing a data management lifecycle. You’ll also learn about the cybersecurity threats facing organizations and best practices for handling security and privacy incidents that arise.

Data Governance

Data governance programs identify, track, and manage sensitive information for an organization, ensuring that data handling practices are consistent with the organization’s policies and procedures. This includes building an inventory of ...