Assessment: GDPR
- 15
- Questions
- No time limit
- 2
- Attempts left
- 70%
- Passing threshold
Question 1 of 15
Maritime Safety Committee (MSC) and The Facilitation Committee (FAL) have issued “Guidelines on maritime cyber risk management” as an answer to what?
Correct - Cyber attacks led to the aritime Safety Committee (MSC) and The Facilitation Committee (FAL) issuing “Guidelines on maritime cyber risk management”.
Incorrect - You should review the My Rights and Data Processing section.
Question 2 of 15
GDPR is brought by the European Union and is applicable to the EU area only. Is this statement true or false?
Correct - This statement is false.
Incorrect - You should review the What is GDPR? section.
Question 3 of 15
Which of the following statements is true when it comes to a vessel's commercial data?
Correct - A vessel's commercial data is only subject to GDPR if it includes personal data.
Incorrect - You should review the How Important is the Data Subject and Data Processing in the Maritime Industry? section.
Question 4 of 15
Data subjects can withdraw previously given consent whenever they want and the organisation needs to honour their decision. Is this statement true or false?
Correct - This statement is true.
Incorrect - You should review the My Rights and Data Processing section.
Question 5 of 15
In case of a cyber-attack onboard, what systems are vulnerable?
Correct - The Bridge and engine room have networked computers that may be vulnerable to attack.
Incorrect - You should review the How Important is the Data Subject and Data Processing in the Maritime Industry? section.
Question 6 of 15
As an organisation, I must always appoint a Data Processing Officer. Is this statement true or false?
Correct - This statement is false.
Incorrect - You should review the How Important is the Data Subject and Data Processing in the Maritime Industry? section.
Question 7 of 15
The advantage of the 'NIST framework' lies in its local application and exactingness, which is why it can be employed in many industries, including the maritime one. Is this statement true or false?
Correct - This statement is false.
Incorrect - You should review the How Important is the Data Subject and Data Processing in the Maritime Industry? section.
Question 8 of 15
The NIST framework covers five areas that are essential for a successful cybersecurity framework. Which of the following is not part of these five areas?
Correct - Installation is not one of the five areas of the NIST framework
Incorrect - You should review the How Important is the Data Subject and Data Processing in the Maritime Industry? section.
Question 9 of 15
As a seafarer on board, it doesn´t matter if I use company computers for personal usage. Is this statement true or false?
Correct - This statement is false.
Incorrect - You should review the How Important is the Data Subject and Data Processing in the Maritime Industry? section.
Question 10 of 15
Fill in the sentence: The GDPR sites supervisory authorities the power to issue fines of up to €20 million or __% of the breached organisations annual global turnover.
Correct - The GDPR sites supervisory authorities the power to issue fines of up to €20 million or 4% of the breached organisations annual global turnover.
Incorrect - You should review the What is GDPR? section.
Question 11 of 15
What is the data subject?
Correct - The data subject is the person whose data is processed.
Incorrect - You should review the My Rights and Data Processing section.
Question 12 of 15
Data Protection Directive (DPD) was replaced with General Data Protection Regulation (GDPR) in what year?
Correct - GDPR came into force in 2018.
Incorrect - You should review the What is GDPR? section.
Question 13 of 15
What is personal data?
Correct - Personal data is any information related to an identified or identifiable natural person.
Incorrect - You should review the What is GDPR? section.
Question 14 of 15
Which of the following is not part of the 7 key principles?
Correct - Empathy is not one of the seven key principles.
Incorrect - You should review the My Rights and Data Processing section.
Question 15 of 15
When there has been a violation of personal privacy, within what time period are companies obligated to report system violations?
Correct - After a breach the company has up to 72 hours to report it.
Incorrect - You should review the How Important is the Data Subject and Data Processing in the Maritime Industry? section.
You Passed This Quiz. Let’s Move On!
Maritime Safety Committee (MSC) and The Facilitation Committee (FAL) have issued “Guidelines on maritime cyber risk management” as an answer to what?
GDPR is brought by the European Union and is applicable to the EU area only. Is this statement true or false?
Which of the following statements is true when it comes to a vessel's commercial data?
Data subjects can withdraw previously given consent whenever they want and the organisation needs to honour their decision. Is this statement true or false?
In case of a cyber-attack onboard, what systems are vulnerable?
As an organisation, I must always appoint a Data Processing Officer. Is this statement true or false?
The advantage of the 'NIST framework' lies in its local application and exactingness, which is why it can be employed in many industries, including the maritime one. Is this statement true or false?
The NIST framework covers five areas that are essential for a successful cybersecurity framework. Which of the following is not part of these five areas?
As a seafarer on board, it doesn´t matter if I use company computers for personal usage. Is this statement true or false?
Fill in the sentence: The GDPR sites supervisory authorities the power to issue fines of up to €20 million or __% of the breached organisations annual global turnover.
What is the data subject?
Data Protection Directive (DPD) was replaced with General Data Protection Regulation (GDPR) in what year?
What is personal data?
Which of the following is not part of the 7 key principles?
When there has been a violation of personal privacy, within what time period are companies obligated to report system violations?
Too Bad! But That Wasn't Enough
Maritime Safety Committee (MSC) and The Facilitation Committee (FAL) have issued “Guidelines on maritime cyber risk management” as an answer to what?
GDPR is brought by the European Union and is applicable to the EU area only. Is this statement true or false?
Which of the following statements is true when it comes to a vessel's commercial data?
Data subjects can withdraw previously given consent whenever they want and the organisation needs to honour their decision. Is this statement true or false?
In case of a cyber-attack onboard, what systems are vulnerable?
As an organisation, I must always appoint a Data Processing Officer. Is this statement true or false?
The advantage of the 'NIST framework' lies in its local application and exactingness, which is why it can be employed in many industries, including the maritime one. Is this statement true or false?
The NIST framework covers five areas that are essential for a successful cybersecurity framework. Which of the following is not part of these five areas?
As a seafarer on board, it doesn´t matter if I use company computers for personal usage. Is this statement true or false?
Fill in the sentence: The GDPR sites supervisory authorities the power to issue fines of up to €20 million or __% of the breached organisations annual global turnover.
What is the data subject?
Data Protection Directive (DPD) was replaced with General Data Protection Regulation (GDPR) in what year?
What is personal data?
Which of the following is not part of the 7 key principles?
When there has been a violation of personal privacy, within what time period are companies obligated to report system violations?
Rate Your Experience
