DHS Protecting Personal Information (Questions with complete answers)
A privacy incident is the suspected or confirmed loss of control compromise unauthorized disclosure on authorize acquisition or any similar occurrence when? correct answers True
Indicate which of the following are examples of PII correct answers A leave request with name, last four of SSN and medical info.
An employee roster with home address and phone number.
A supervisors list of employee performance ratings.
A witness protection list.
A workers compensation form with name and medical info.
A workers compensation form with name and medical info.
If someone within the DHS asks for PII in digital or hardcopy format what should you do first? correct answers Verify the requesters need to know before sharing.
Who is responsible for protecting PII? correct answers All of the above
Personally owned equipment can be used to access or store PII for official purpose. correct answers False
If you maintain PII in hardcopy or electronically use safeguards and technical access controls to restrict access to staff with an official need to know correct answers True
Do you not share PII with anyone outside of DAS before checking with your component privacy officer since several acquirements must be met. correct answers True
Never email another individuals PI to or from your personal email account. correct answers True
You may only email PII from DHS to an external email within an encrypted or password-
protected attachment. Components require an encryption of people I I emailed internally correct answers True
Who is responsible for protecting PAI? correct answers All of the above
A privacy incident is the suspected or confirmed loss of control compromise unauthorized disclosure on authorize acquisition or any similar occurrence when? correct answers True
Indicate which of the following are examples of PII correct answers A leave request with name, last four of SSN and medical info.
An employee roster with home address and phone number.
A supervisors list of employee performance ratings.
A witness protection list.
A workers compensation form with name and medical info.
A workers compensation form with name and medical info.
If someone within the DHS asks for PII in digital or hardcopy format what should you do first? correct answers Verify the requesters need to know before sharing.
Who is responsible for protecting PII? correct answers All of the above
Personally owned equipment can be used to access or store PII for official purpose. correct answers False
If you maintain PII in hardcopy or electronically use safeguards and technical access controls to restrict access to staff with an official need to know correct answers True
Do you not share PII with anyone outside of DAS before checking with your component privacy officer since several acquirements must be met. correct answers True
Never email another individuals PI to or from your personal email account. correct answers True
You may only email PII from DHS to an external email within an encrypted or password-
protected attachment. Components require an encryption of people I I emailed internally correct answers True
Who is responsible for protecting PAI? correct answers All of the above
