Data
Privacy
Employee Responsibilities
100

This protocol encrypts data transmitted over the internet, providing a secure connection between a user's browser and a website.

What is HTTPS?
100

This legal contract ensures that parties involved do not disclose confidential information  shared during their business relationship.

What is a Non-Disclosure Agreement (NDA)?

100

This training ensures all staff are knowledgeable about the latest security threats and how to protect sensitive company information.

What is security awareness training?

200

This term describes the process of converting data into a secure format to prevent unauthorized access.

What is encryption?

200

This document outlines how an organization collects, uses, and protects personal information from its users.

What is a privacy policy?

200

This type of training focuses on preventing security vulnerabilities in software development, particularly for engineers.

What is OWASP training?

300

This protocol is used for transferring hypertext and does not include the security features of its more secure counterpart.

What is HTTP?

300

This document sets forth the rules and guidelines that users must agree to follow when using a website or service.

What are Terms of Use / Terms and Conditions?

300

A new requirement for employees who use artificial intelligence in their work to ensure compliance with data security practices.

What is AI security training?

400

This type of cyber attack involves tricking individuals into providing sensitive information by impersonating a trustworthy entity in electronic communications.

What is phishing?

400

This practice involves obtaining explicit consent from individuals before collecting or processing their personal data, ensuring informed participation.

What is opt-in consent?

400

This is the annual requirement for employees to ensure they are compliant with ISO 27001 standards.

What is re-reading and acknowledging company policies?

500

This type of malware encrypts a victim's files and demands a ransom payment to restore access to the data.

What is ransomware?

500

This concept refers to the idea that individuals have the right to control their personal information and how it is collected, used, and shared by organizations.

What is privacy?

500

This is a responsibility of employees to notify the proper personal if they notice any potential breaches or suspicious activity.

What is reporting a possible security incident / violation?