A city CISO wonders whether NIS/NIS 2 belong in a European data-protection exam conversation. Which placement is correct for CIPP/E Domain I?
Select an answer to reveal the explanation.
Short Explanation
NIS and NIS 2 are the cybersecurity cousins on the same European legislative street as the GDPR — related, not identical. A privacy exam still mentions them so you know the neighbourhood. Do not swap them in as a GDPR replacement.
Full Explanation
The CIPP/E Body of Knowledge includes NIS/NIS 2 among related legislation in the European data-protection legislative framework discussion. They address cybersecurity and resilience obligations for relevant entities and intersect with incident and security themes, but they do not replace the GDPR’s personal-data protection regime. Candidates should recognise the related-legislation relationship without converting items into pure security-engineering exams.