QuestionQ335

Privacy Engineering

Which action should be performed FIRST when creating specialized training for employees who have key responsibilities for protecting personal data?

  • A Identify the key internal and external threats to data protection.
  • B Develop metrics to define and measure a successful training program.
  • C Benchmark existing training programs against industry standards.
  • D Define the roles, responsibilities, and required skills based on job descriptions.
Explanation

Role-based privacy training must be grounded in the employees’ defined roles, responsibilities, and required knowledge and skills so the program can address the duties they actually perform. NIST guidance describes using work roles and associated tasks, knowledge, and skills to align training and learning programs with workforce needs.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!