ISM guideline: encryption
Name:
Date:
Class:
A
Quick Questions
Shade in the A or B circle for each question.
1. Does the ISM encryption guideline say to encrypt stored data?
2. Does the guideline also apply to data being sent?
3. Does the guideline focus on protecting sensitive data specifically?
4. Does following the guideline reduce the risk if data is accessed without permission?
5. Does skipping the guideline leave sensitive data exposed?
B
Match the Pairs
Draw a line connecting each item on the left to its match on the right.
| Left column | Right column | |
|---|---|---|
| 1Encrypt stored data | AThis breaks the guideline - data stays exposed | |
| 2Encrypt data being sent | BProtects data while it travels | |
| 3The ISM guideline focuses on sensitive data | CProtects data while it sits in storage | |
| 4Following the encryption guideline reduces risk | DThis doesn't fully follow the guideline | |
| 5Leaving sensitive data unencrypted | EData stays protected even if accessed | |
| 6Only encrypting stored data and not sent data | FApplying extra protection where it matters most |
C
Definitions
ISM encryption guideline
D
Fill in the Blanks
Complete each line of code by filling in the missing parts.
1.
The guideline says to _______
data that is stored.
2.
It also applies to data being ____.
3.
The guideline focuses on _________ data.
4.
Following it _______
the risk if data is accessed.
5.
Not following it leaves data _______.
E
Spot the Error
Shade in the letter of the line that contains an error.
Question 1
A
Encrypt stored data
B
Leave stored data unencrypted
C
Encrypt data being sent
Question 2
A
Encrypt data being sent
B
Leave sent data unencrypted
C
Encrypt stored data
Question 3
A
Encrypt sensitive data
B
Ignore sensitive data
C
Encrypt stored data too
Question 4
A
Encrypt stored data
B
Encrypt sent data
C
Following it increases risk
Question 5
A
Encrypt stored data
B
Encrypt sent data
C
Not following it protects data
Answer Key
ISM guideline: encryption
Section A: Quick Questions
Q1
B — Yes
Q2
A — Yes
Q3
A — Yes
Q4
B — Yes
Q5
A — Yes
Section B: Match the Pairs
Q1
Encrypt stored data → Protects data while it sits in storage
Q2
Encrypt data being sent → Protects data while it travels
Q3
The ISM guideline focuses on sensitive data → Applying extra protection where it matters most
Q4
Following the encryption guideline reduces risk → Data stays protected even if accessed
Q5
Leaving sensitive data unencrypted → This breaks the guideline - data stays exposed
Q6
Only encrypting stored data and not sent data → This doesn't fully follow the guideline
Section C: Definitions
Q1
ISM encryption guideline — A rule that tells organisations to encrypt sensitive data, both when stored and when sent, so it stays protected.Section D: Fill in the Blanks
Q1
The guideline says to encrypt
data that is stored.Q2
It also applies to data being sent.Q3
The guideline focuses on sensitive data.Q4
Following it reduces
the risk if data is accessed.Q5
Not following it leaves data exposed.Section E: Spot the Error
Q1
B — Line 2 says to leave stored data unencrypted, but the guideline says stored data should be encrypted.
Q2
B — Line 2 says to leave sent data unencrypted, but the guideline says data being sent should also be encrypted.
Q3
B — Line 2 says to ignore sensitive data, but the guideline focuses specifically on protecting sensitive data.
Q4
C — Line 3 says following it increases risk, but following the guideline actually reduces the risk if data is accessed.
Q5
C — Line 3 says not following it protects data, but skipping the guideline actually leaves data exposed.