IAPP CIPM

IAPP Certified Information Privacy Manager (CIPM)の受験料は決して安くなく、再受験となれば費用も時間も二重にかかってしまいます。JpshikenのCIPM試験対策教材で本番の形式に慣れておけば、一度の受験で実力を出し切りやすくなります。

IAPP CIPM 試験概要:

IAPP CIPM 試験シラバストピック:

CIPM受験者から寄せられるご質問と回答

IAPP Certified Information Privacy Manager (CIPM)はどんな資格ですか？

CIPM試験は、「Certified Information Privacy Manager (CIPM)」認定を取得するための試験です。認定レベルはProfessionalに位置づけられています。関連する認定にはCIPP/E、CIPP/US、CIPP/C、CIPTなどがあり、キャリアパスに合わせた学習計画を立てやすい資格体系となっています。Jpshikenでは、この試験に対応した275問の練習問題を用意しています。

CIPM試験の問題数と試験時間はどれくらいですか？

CIPM試験の問題数は90、試験時間は120 分となっています。問題数を試験時間で割ると1問あたりに使える時間は意外と短く、読み込みに時間のかかる長文問題では特にペース配分が重要です。Jpshikenのテストエンジンには制限時間つきの模擬試験モードがあるため、本番と同じ時間設定で275問の練習問題を解きながら、時間切れを防ぐ解答リズムを身につけられます。

CIPM試験の合格点と受験料はいくらですか？

CIPM試験の合格基準点は300（スケールドスコア 100–500）、受験料はUSD 550（一般）、USD 375（IAPP会員、地域によって異なる場合があります）です。万が一不合格になった場合、再受験には再度全額の受験料が必要になるため、本番前に十分な得点力があるか確認しておくことが大切です。Jpshikenの模擬試験で繰り返し自己採点し、安定して合格基準を上回る状態になってから受験を申し込むことをおすすめします。

CIPM試験に受験資格はありますか？

CIPM試験の受験条件について、公式情報では次のように案内されています。必須の前提条件はありません。プライバシー原則および組織のデータ管理に関する基本的な理解が推奨されます。。受験条件は変更される場合があるため、お申し込みの前に公式ページで最新の要件をご確認ください。

CIPM試験の申し込み方法を教えてください

CIPM試験は、以下の公式窓口からお申し込みいただけます。

• CIPM認定公式ページ
• IAPP試験登録（Pearson VUE）

試験方式はPearson VUEによるコンピュータベース試験（オンライン監督試験またはテストセンター）です。申し込みのタイミングや会場の空き状況は時期によって変わるため、受験予定日が決まったら早めに手続きを済ませるのがおすすめです。

CIPM試験の公式トレーニングはありますか？

IAPP Certified Information Privacy Manager (CIPM)の対策として、公式では以下のトレーニングが推奨されています。

• IAPP CIPMトレーニングコース
• IAPP公式学習リソース

公式トレーニングで基礎を固めたうえで、Jpshikenの275問の練習問題を解けば、知識の定着度を本番形式で確認できます。

購入前にCIPM練習問題を試すことはできますか？

はい、Jpshikenでは無料サンプルをご用意しており、購入前に問題の傾向や解説の構成をご確認いただけます。また、ご購入後は365日間の無料更新サービスが付いているため、試験内容の改訂にも追加費用なしで対応できます。更新期間の終了後も、継続更新を50%割引でご利用いただけます。

万が一CIPM試験に合格できなかった場合はどうなりますか？

Jpshikenでは返金保証をご用意しています。ご購入後60日以内に対応する試験を受験し、不合格だった場合は、受験票の写しと公式スコアレポートのPDFを試験日から2日以内にご提出いただければ、7日以内に全額返金の手続きを行います。なお、ご購入後3日以内の受験、ダウンロード後に実際に受験されなかった場合、無料資料や期限切れのご注文は対象外となり、受験者名とご購入者名が一致している必要があります。返金の代わりに、同等の試験対策資料2つを無料でお受け取りいただき、元の製品の更新サービスを継続することも可能です。製品はお支払い後すぐにダウンロードでき、1分以内にメールでもお届けします。2時間経っても届かない場合はカスタマーサポートまでご連絡ください。インストールできるパソコンの台数に制限はありません。

CIPM試験ではどのようなトピックが出題されますか？

CIPM試験の出題範囲は、公式シラバスで2つの領域に分かれています。主な領域には、プライバシープログラムの運用ライフサイクル（50%）、プライバシープログラムのガバナンス（50%）などがあります。各領域の詳細なトピックと配点は、このページ上部の試験大綱セクションに掲載していますので、あわせてご確認ください。

IAPP Certified Information Privacy Manager (CIPM) 認定 CIPM 試験問題：

問題 #1
What is the best way to understand the location, use and importance of personal data within an organization?

A. By evaluating methods for collecting data.
B. By interviewing employees tasked with data entry.
C. By analyzing the data inventory.
D. By testing the security of data systems.

問題 #2
SCENARIO
Please use the following to answer the next QUESTION:
It's just what you were afraid of. Without consulting you, the information technology director at your organization launched a new initiative to encourage employees to use personal devices for conducting business. The initiative made purchasing a new, high-specification laptop computer an attractive option, with discounted laptops paid for as a payroll deduction spread over a year of paychecks. The organization is also paying the sales taxes. It's a great deal, and after a month, more than half the organization's employees have signed on and acquired new laptops. Walking through the facility, you see them happily customizing and comparing notes on their new computers, and at the end of the day, most take their laptops with them, potentially carrying personal data to their homes or other unknown locations. It's enough to give you data- protection nightmares, and you've pointed out to the information technology Director and many others in the organization the potential hazards of this new practice, including the inevitability of eventual data loss or theft.
Today you have in your office a representative of the organization's marketing department who shares with you, reluctantly, a story with potentially serious consequences. The night before, straight from work, with laptop in hand, he went to the Bull and Horn Pub to play billiards with his friends. A fine night of sport and socializing began, with the laptop "safely" tucked on a bench, beneath his jacket. Later that night, when it was time to depart, he retrieved the jacket, but the laptop was gone. It was not beneath the bench or on another bench nearby. The waitstaff had not seen it. His friends were not playing a joke on him. After a sleepless night, he confirmed it this morning, stopping by the pub to talk to the cleanup crew. They had not found it.
The laptop was missing. Stolen, it seems. He looks at you, embarrassed and upset.
You ask him if the laptop contains any personal data from clients, and, sadly, he nods his head, yes. He believes it contains files on about 100 clients, including names, addresses and governmental identification numbers. He sighs and places his head in his hands in despair.
What should you do first to ascertain additional information about the loss of data?

A. Check company records of the latest backups to see what data may be recoverable.
B. Investigate the background of the person reporting the incident.
C. Interview the person reporting the incident following a standard protocol.
D. Call the police to investigate even if you are unsure a crime occurred.

問題 #3
Under the GDPR, what obligation does a data controller or processor have after appointing a data protection officer (DPO)?

A. To ensure that the DPO receives sufficient instructions regarding the exercise of their defined tasks.
B. To submit for approval to the DPO a code of conduct to govern organizational practices and demonstrate compliance with data protection principles.
C. To ensure that the DPO acts as the sole point of contact for individuals' questions about their personal data.
D. To provide resources necessary to carry out the defined tasks of the DPO and to maintain their expert knowledge.

問題 #4
SCENARIO
Please use the following to answer the next QUESTION:
As they company's new chief executive officer, Thomas Goddard wants to be known as a leader in data protection. Goddard recently served as the chief financial officer of Hoopy.com, a pioneer in online video viewing with millions of users around the world. Unfortunately, Hoopy is infamous within privacy protection circles for its ethically Questionable practices, including unauthorized sales of personal data to marketers.
Hoopy also was the target of credit card data theft that made headlines around the world, as at least two million credit card numbers were thought to have been pilfered despite the company's claims that
"appropriate" data protection safeguards were in place. The scandal affected the company's business as competitors were quick to market an increased level of protection while offering similar entertainment and media content. Within three weeks after the scandal broke, Hoopy founder and CEO Maxwell Martin, Goddard's mentor, was forced to step down.
Goddard, however, seems to have landed on his feet, securing the CEO position at your company, Medialite, which is just emerging from its start-up phase. He sold the company's board and investors on his vision of Medialite building its brand partly on the basis of industry-leading data protection standards and procedures.
He may have been a key part of a lapsed or even rogue organization in matters of privacy but now he claims to be reformed and a true believer in privacy protection. In his first week on the job, he calls you into his office and explains that your primary work responsibility is to bring his vision for privacy to life. But you also detect some reservations. "We want Medialite to have absolutely the highest standards," he says. "In fact, I want us to be able to say that we are the clear industry leader in privacy and data protection. However, I also need to be a responsible steward of the company's finances. So, while I want the best solutions across the board, they also need to be cost effective." You are told to report back in a week's time with your recommendations. Charged with this ambiguous mission, you depart the executive suite, already considering your next steps.
You give a presentation to your CEO about privacy program maturity. What does it mean to have a
"managed" privacy program, according to the AICPA/CICA Privacy Maturity Model?

A. Regular review and feedback are used to ensure continuous improvement toward optimization of the given process.
B. Procedures or processes exist, however they are not fully documented and do not cover all relevant aspects.
C. Procedures and processes are fully documented and implemented, and cover all relevant aspects.
D. Reviews are conducted to assess the effectiveness of the controls in place.

問題 #5
You would like your organization to be independently audited to demonstrate compliance with international privacy standards and to identify gaps for remediation.
Which type of audit would help you achieve this objective?

A. Second-party audit.
B. First-party audit.
C. Third-party audit.
D. Fourth-party audit.

解説：