cipm question 158 discussion

Question 158

If your organization has a recurring issue with colleagues not reporting personal data breaches, all of
the following are advisable to do EXCEPT?

• A. Carry out a root cause analysis on each breach to understand why the incident happened.
• B. Communicate to everyone that breaches must be reported and how they should be reported.
• C. Provide role-specific training to areas where breaches are happening so they are more aware.
• D. Distribute a phishing exercise to all employees to test their ability to recognize a threat attempt.