CIPM: Certified Information Privacy ManagerDemo

Question

You find evidence that company employees routinely bypass the privacy officer when developing new initiatives.

How can you most effectively call attention to the extent of this problem?

A Insist upon one-on-one consultation with each person who works around the privacy officer.
B Develop a metric showing the number of initiatives launched without consultation and include it in reports, presentations, and consultation.
C Hold discussions with the department head of anyone who fails to consult with the privacy officer.
D Take your concerns straight to the Chief Executive Officer.

Explanation

A metric that counts initiatives launched without privacy-officer consultation objectively demonstrates the scale and trend of the governance gap. Including it in reports, presentations, and consultations gives decision-makers evidence to assess the control weakness and prioritize corrective action. NIST guidance describes measurement programs as a means to develop and implement metrics that support decision-making, reporting, and performance improvement.

Learn more

NIST SP 800-55 Volume 2: Developing an Information Security Measurement Program

CIPM: Certified Information Privacy ManagerDemo

AstroTutor

Notes

Readiness

QuestionQ240

Community Discussion