Isaca Certification CDPSE Isaca Study Notes

Application hardening measures are the most important action to protect a mobile banking app and its data against manipulation and disclosure because they prevent attackers from reverse engineering, tampering, or injecting malicious code into the app. Application hardening measures include techniques such as code obfuscation, encryption, integrity checks, anti-debugging, and anti-tampering mechanisms. These measures make the app more resilient and secure against various types of cyberattacks.

References:

• ISACA Certified Data Privacy Solutions Engineer Study Guide, Domain 3: Privacy Engineering, Task 3.4: Implement privacy engineering techniques to protect data in applications and systems, p. 104-105.
• What is Application Hardening? | Glossary | Digital.ai

The best way for an organization to maintain the effectiveness of its privacy breach incident response plan is to conduct annual data privacy tabletop exercises. A tabletop exercise is a simulated scenario that tests the organization’s ability to respond to a privacy breach incident in a realistic and interactive way. A tabletop exercise can help the organization to evaluate the roles and responsibilities of the incident response team, identify the gaps and weaknesses in the plan, improve the communication and coordination among the stakeholders, and update the plan based on the lessons learned and best practices12. A tabletop exercise can also enhance the awareness and readiness of the organization to handle privacy breach incidents in a timely and effective manner3. References:

• ISACA CDPSE Review Manual, Chapter 4, Section 4.3.2
• ISACA Journal, Volume 4, 2019, “Tabletop Exercises: Three Sample Scenarios”
• ISACA Journal, Volume 6, 2017, “Privacy Breach Response: Preparing for the Inevitable”