Compliance Frameworks Quiz

What you'll be asked

1. Which regulatory framework is primarily designed to protect the privacy and security of Protected Health Information (PHI) in the United States?
2. An e-commerce company that processes credit card payments must ensure they are compliant with which standard to maintain secure cardholder data environments?
3. When implementing the NIST Cybersecurity Framework (CSF), which of the following is considered a core 'Function' of the framework?
4. Your organization is expanding into the European market. Which regulation dictates strict requirements regarding data subject rights and the 'right to be forgotten'?
5. A cloud service provider is undergoing an audit to prove the effectiveness of their security controls over a specific period. Which report would they provide to a customer to demonstrate operational effectiveness based on the Trust Services Criteria?

Answers and explanations come after you submit.