Q 5 An organization’s fraud response plan should explain in detail that how the organization react in detail and the reaction should be same for all such cases.
Option B is Correct.
A fraud response plan outlines the actions that members of an organization will take when suspicions of fraud have arisen. Because every fraud is different, the response plan will not be able to provide the reaction in detials, The appropriate response will vary based on the event, management should include a range of scenarios in the response plan.
Q 7 The GDPR applies to organizations based in the European Union (EU) only.
Option B is correct.
The General Data Protection Regulation (GDPR) applies to organizations that are based in the European Union (EU) that collect or process the personal data of any person, regardless of where the person is located. The GDPR also applies to organizations that are not based in the EU if they collect or process the personal data of any person located in the EU for the purpose of:
Offering goods or services to the person, regardless of whether payment is required
Monitoring the person’s behavior
Therefore, the GDPR applies to most companies that have customers in the EU, even if the companies have no physical presence in the EU.
Generally speaking, the GDPR could limit the availability of personal information for fraud examiners, whether they or their organization is collecting that information or attempting to access personal information collected and disclosed by other organizations.
Q 9 A covert operation when a fraud examiner observes situations and interactions to gather information about individual's activity is known as?
Option C is Correct.
Surveillance operations use the skill of observation to determine individual's activity. Surveillance operations are designed to gather information.