CT-STE: Certified Tester Security Test Engineer

By ISTQB · Question Mode

QuestionQ6

Security Testing Standards and Best Practices

ElectricCars is a multinational automotive manufacturer that specializes in the design and production of electric vehicles. The company must comply with three manufacturing-process standards: ISO/SAE 21434 for automotive cybersecurity engineering, GDPR (General Data Protection Regulation), and UN Regulation No. 155 (Uniform provisions concerning the approval of vehicles regarding cyber security and cyber security management system).

Compliance with these regulations requires:

  • secure storage and communication of data within vehicles and between vehicles and backend systems;
  • emergency procedures for cybersecurity breaches affecting production, vehicles in operation, or customer data; and
  • transparent incident-reporting mechanisms for regulators and customers.

Which of the following is a security test resulting from the compliance requirement?

Explanation

A simulated data breach that exercises the notification process validates incident-reporting procedures and legal compliance. GDPR requires notification of qualifying personal-data breaches to the competent supervisory authority without undue delay and, where feasible, within 72 hours; it also requires communication to affected individuals when the breach is likely to create a high risk to their rights and freedoms.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!