CITI Research Methods Practice Test

Access More Questions

A privacy review identifies unresolved concerns about a new data use. What should occur before a final system compliance decision?

Exclude privacy information because authorization is only technical Assume consent resolves every privacy concern Delete the privacy finding Include the privacy risk and required privacy documentation in the decision package and obtain appropriate review

Correct Answer:

Include the privacy risk and required privacy documentation in the decision package and obtain appropriate review

Explanation:

Current CGRC scope integrates security and privacy. Relevant privacy risks, assessments, and documentation should be part of the evidence presented to the appropriate decision-makers.

Access more questions from this quiz

Continue to CITI Research Methods Practice Test for more practice questions and the full quiz experience.

Access More Questions