Compliance
Audit this case
As a Security Compliance Officer at a multinational company, you recently conducted an audit and discovered multiple compliance violations that require immediate attention. Your primary responsibility is to identify and address these issues to ensure regulatory adherence. Each violation falls under a specific compliance-related category, and it is essential to classify them accurately. By doing so, you can implement corrective actions, mitigate risks, and enhance the company’s security posture. Your role involves assessing the severity of each issue, aligning them with relevant regulations, and ensuring compliance with industry standards to prevent legal consequences and strengthen the organization's overall security framework.
Question 1.
An employee stores customer credit card information without encryption, violating a major payment security standard. What compliance framework is being violated?
Question 2.
A hospital fails to protect patient records, leading to a data breach. What regulation has been violated?
Question 3.
An EU-based company collects personal data from users without their consent. What regulation is being violated?
Question 4.
A company does not have proper logs and controls in place to detect financial fraud. Which regulation focuses on financial compliance?
Question 5.
A company fails to properly classify and protect government-related data. What compliance standard should they follow?
Question 6.
An IT team does not conduct regular security risk assessments, violating a key ISO standard. Which standard defines best practices for information security management?
Question 7.
A cloud service provider does not comply with security requirements for government agencies. What compliance framework applies to them?
Question 8.
A company mishandles customer data from California residents and fails to provide an opt-out option. What state law applies?
Question 9.
A company providing cybersecurity services to the Department of Defense does not meet security assessment requirements. What compliance framework applies?
Question 10.
A financial institution does not implement controls to prevent money laundering. Which regulation is being violated?