CCSP Exam QuestionsBrowse all questions from this exam

CCSP Exam - Question 3


Which of the following is not a component of contractual PII?

Show Answer
Correct Answer: B

The value of data is not considered a component of contractual PII. Contractual PII typically involves details regarding the scope of processing, the location of data, and the use of subcontractors, but it does not concern itself with the intrinsic value of the data being processed.

Discussion

17 comments
Sign in to comment
estarisbourneOption: B
Nov 29, 2019

Contractual PII components are as follows: (correct answer is B) Scope of processing Use of Subcontractors Removal/deletion of data Appropriate/Required data security controls Locations of Data Return of data/restitution of data Audits/right to audit subcontractors

ctux
Dec 1, 2019

Yes, correct anser is B. Wrong answer but correct explanation, funny... :)

ArizonaClassicsOption: B
Jan 21, 2020

Correct Answer is B

nelombgOption: B
Jan 11, 2022

correct

ckhoOption: B
Feb 27, 2022

Wrong answer but correct explanation

tuantmbOption: B
Feb 26, 2024

The answer is B: Value of data Contractual PII: refers to personal information that is processed, transmitted, or stored by an organization or entity as part of its business services, typically includes the following components (as csonline): + Scope of processing: purpose, nature and extent of the data processing, activities. + Location of data: the geographic regions where the data is stored, transferred, or accessed. + Use of subcontractors: The third parties that are involved in the data processing activities, such as cloud providers, data processors, or data controllers. + Data protection measures: the technical and organizational safeguards that are implemented to protect the data from unauthorized or unlawful access, use, disclosure, alteration or destruction. The "Value of Data" is not a component of contractual PII, also may depend on the context, market or demand for data but does not affect the obligations or responsibilities of the data processors or controllers.

JKCYOption: B
Mar 31, 2021

B is correct.

BancocoOption: B
May 11, 2021

B is correct

kns20Option: B
Aug 26, 2021

please correct the answer, it should be B

Pegasus_orbOption: B
Dec 14, 2021

True , B

Eric0223Option: B
Oct 6, 2022

i confirm it s B.

Frito_ChipOption: B
Oct 6, 2022

Correct answer is B

Pika26Option: B
Mar 22, 2023

Value of data does not process personal data.

FATWENTYSIXOption: B
May 26, 2023

B: Official ISC2 Guide to the CCSP CBK, 3rd Edition, UNDERSTANDING PRIVACY ISSUES: Components of a Contract

joeee7Option: B
Jul 23, 2023

Correct Answer is B

74gjd_37Option: B
Oct 3, 2023

B. Value of data The components of contractual PII include the scope of processing, location and duration of processing, the purpose and use restrictions, confidentiality and security safeguards, data ownership and return or disposal upon contract termination, sub-processing controls if any sub-processors are used, audit rights and obligations, indemnification or liability clauses in case there is a breach or non-compliance with regulations that would result in fines or litigation costs.

cloudenthusiastOption: B
Feb 26, 2024

Value of data changes constantly

coentrorOption: B
Jul 21, 2024

B of course :)