ICHP IG Training Assessment 2024

Quiz Summary

0 of 15 Questions completed

Questions:

You have already completed the quiz before. Hence you can not start it again.

Quiz is loading…

You must sign in or sign up to start the quiz.

You must first complete the following:

Results

Quiz complete. Results are being recorded.

Results

0 of 15 Questions answered correctly

Your time:

You have reached 0 of 0 point(s), (0)

Question 1 of 15

1. Question

1. True or False? The difference between de-identified (pseudonymised) data and anonymised data is that de-identified data cannot be re-identified by any reasonable means.

True
Correct Incorrect Correct answer

False
Correct Incorrect Correct answer

Correct

Incorrect
Question 2 of 15

2. Question

2. Article 6(1) UK GDPR states there are 6 lawful bases a data controller can rely on. Of the selection below, select all responses which are a correct lawful basis.

Consent
Correct Incorrect Correct answer

Necessity
Correct Incorrect Correct answer

Performance of a Contract
Correct Incorrect Correct answer

Legal Obligation
Correct Incorrect Correct answer

Task in Private Interest
Correct Incorrect Correct answer

Vital Interests
Correct Incorrect Correct answer

Task in public interest or exercising official authority
Correct Incorrect Correct answer

Legitimate interests
Correct Incorrect Correct answer

Correct

Incorrect
Question 3 of 15

3. Question

3. True or false? It is okay to keep personal data for longer than you may have anticipated, just in case.

True
Correct Incorrect Correct answer

False
Correct Incorrect Correct answer

Correct

Incorrect
Question 4 of 15

4. Question

4. True or false? A Data Protection Impact Assessment should be completed before the processing of data starts.

True
Correct Incorrect Correct answer

False
Correct Incorrect Correct answer

Correct

Incorrect
Question 5 of 15

5. Question

5. ICHP has been asked by an NHS Trust to undertake a statistical analysis of its patients. From a data protection perspective, what does this mean for the relationship between ICHP and the NHS Trust? Please select all that apply.

ICHP is the data processor as it processes data on behalf of the NHS Trust and is restricted to the instruction in their contract with the NHS Trust.
Correct Incorrect Correct answer

The NHS Trust is the data controller as it determines the purposes and means of the processing.
Correct Incorrect Correct answer

ICHP is the data processor and can make decisions related to processing.
Correct Incorrect Correct answer

The NHS Trust and ICHP are joint controllers
Correct Incorrect Correct answer

Correct

Incorrect
Question 6 of 15

6. Question

6. Which of the following situations would constitute a personal data breach? Please select all that apply.

Sending an email that contains confidential information via a secure method to the intended recipient.
Correct Incorrect Correct answer

Leaving documents that contain personal identifiable data on a table in the lunch room.
Correct Incorrect Correct answer

Disclosing personal data to a third party without the appropriate lawful basis to do so.
Correct Incorrect Correct answer

Putting a document that contains personal identifiable data in the recycling bin at a coffee shop.
Correct Incorrect Correct answer

Correct

Incorrect
Question 7 of 15

7. Question

7. Which of the following are examples of personal data? Select all that apply.

A name
Correct Incorrect Correct answer

A personal work email address
Correct Incorrect Correct answer

A phone number
Correct Incorrect Correct answer

A nickname
Correct Incorrect Correct answer

NHS number
Correct Incorrect Correct answer

ICHP's office address
Correct Incorrect Correct answer

Correct

Incorrect
Question 8 of 15

8. Question

8. True or False? After identifying a personal data breach, you must fill out an Incident Reporting Form and send it to IGS.

True
Correct Incorrect Correct answer

False
Correct Incorrect Correct answer

Correct

Incorrect
Question 9 of 15

9. Question

9. What does the Freedom of Information Act 2000 (FOIA) regulate?

Access to information held by private companies
Correct Incorrect Correct answer

Access to information held by the government
Correct Incorrect Correct answer

Access to information held by public authorities
Correct Incorrect Correct answer

Access to information held by NGOs
Correct Incorrect Correct answer

Correct

Incorrect
Question 10 of 15

10. Question

10. Who is ICHP’s Data Protection Officer (DPO)?

Natalie Angus
Correct Incorrect Correct answer

Cloud Direct
Correct Incorrect Correct answer

Taj Sallamuddin
Correct Incorrect Correct answer

Axel Heitmueller
Correct Incorrect Correct answer

Correct

Incorrect
Question 11 of 15

11. Question

11. True of False? The Privacy and Electronic Communications Regulations (PECR) applies even when no personal data is being processed.

True
Correct Incorrect Correct answer

False
Correct Incorrect Correct answer

Correct

Incorrect
Question 12 of 15

12. Question

12. When you are working remotely, it is important to keep the following in mind to ensure you are in accordance with ICHP’s Security Policy, Bring Your Own Device Policy and Acceptable Use Policy (select all that apply):

Only devices authorised by ICHP should be used to transport personal data, and any portable devices should always be encrypted; staff must follow appropriate protocols and procedures; staff are responsible for equipment that is issued to them and to return that equipment if it is no longer required. You cannot use a personal laptop computer if there is an issue with your ICHP authorised device and you are not able to keep your ICHP authorised device in the event that you leave the organisation.
Correct Incorrect Correct answer

You can use a personal laptop computer if your ICHP authorised device is not working or charged
Correct Incorrect Correct answer

Staff must follow appropriate protocols and procedures
Correct Incorrect Correct answer

Staff are able to keep their ICHP authorised device after they have left the organisation
Correct Incorrect Correct answer

Staff are responsible for equipment that is issued to them and to return that equipment if it is no longer required
Correct Incorrect Correct answer

Correct

Incorrect
Question 13 of 15

13. Question

13. Which of the following could potentially be a sign of a phishing email? Please select all that apply.

An email address from an unfamiliar sender
Correct Incorrect Correct answer

Poor spelling and grammatical errors
Correct Incorrect Correct answer

Excessive use of punctuation
Correct Incorrect Correct answer

Alarming urgency for action, e.g. requesting your immediate action to click on a provided link
Correct Incorrect Correct answer

Correct

Incorrect
Question 14 of 15

14. Question

14. What should you do if you receive a suspicious looking email?

Respond to the email and tell the sender you do not want to receive emails from them again
Correct Incorrect Correct answer

Move the email to your junk folder
Correct Incorrect Correct answer

Raise a ticket with Cloud Direct titled "Suspicious Email", and include an attachment of the suspicious email so Cloud Direct can take appropriate action
Correct Incorrect Correct answer

Delete the email
Correct Incorrect Correct answer

Correct

Incorrect
Question 15 of 15

15. Question

15. True or false? If your line manager or senior staff member requests that you share your password with them, you should do so.

True
Correct Incorrect Correct answer

False
Correct Incorrect Correct answer

Correct

Incorrect

Quiz Summary

Information

Results

Results

Categories

1. Question

2. Question

3. Question

4. Question

5. Question

6. Question

7. Question

8. Question

9. Question

10. Question

11. Question

12. Question

13. Question

14. Question

15. Question

Send Us A Message