Certified Information Privacy Manager (CIPM) — Question 44

A company has started developing a privacy program. The Data Protection Officer (DPO) has been working long hours to develop cohesive procedures and processes; however, he failed to fully document each aspect of the data retention process. Which level from the Privacy Maturity Model most closely describes the company?

Answer options

• A. Ad Hoc.
• B. Defined.
• C. Managed.
• D. Repeatable.

Correct answer: D

Explanation

The correct answer is D, Repeatable, as it indicates that while some processes are in place, they are not fully documented or standardized. Option A, Ad Hoc, suggests a lack of processes, while B, Defined, implies complete documentation, and C, Managed, indicates a higher level of process control than what is described.