Protecting Workplace Information Course 2026
This course is for employees in Canada who handle customer, employee or business information. It covers classifying information and need-to-know, privacy law basics, safe sharing, printing and disposal, remote work and cloud services, and what to do about privacy breaches. Each topic has a lesson and an untimed quiz, then a timed 35-question final assessment; score 80% or more to earn a Certificate of Completion.
إجابة سريعة
تتضمن هذه الدورة المجانية نحو 150 دقيقة من الدروس، و6 اختبارات موضوعية بلا وقت محدد (98 سؤالًا إجمالًا)، وتقييمًا نهائيًا محدد الوقت من 35 سؤالًا يُختار عشوائيًا. احصل على 80% أو أكثر في التقييم النهائي لتنزيل شهادة إتمام (خاصة، غير معتمدة). تمت مراجعته مقارنةً بالمصادر الرسمية في 13 أكتوبر 2026.
ما ستتعلمه
- Classify workplace information and apply the need-to-know rule
- Explain what personal information is and which Canadian privacy law usually applies
- Share information safely by email, in conversation and in approved tools
- Store, keep and dispose of paper and electronic records securely
- Protect work information at home, on devices and in cloud services
- Recognize a privacy breach, take the first steps and explain the reporting rules
احصل على 80% أو أكثر لتنزيل شهادتك.
خطتك الدراسية
اقرأ كل درس، ثم أجرِ اختبار موضوعه (بلا وقت محدد ومع الشرح)، ثم التقييم النهائي المحدد بوقت. تُختار مجموعة جديدة من الأسئلة في كل مرة. يُحفظ تقدمك في هذا المتصفح.
- اقرأ الدروس6 دروس، نحو 150 دقيقة
- اختبار الموضوع 1: Classifying information and need-to-knowعدد الأسئلة: 16
- اختبار الموضوع 2: Personal information and Canadian privacy lawعدد الأسئلة: 16
- اختبار الموضوع 3: Sharing information safely: email, talk and AI toolsعدد الأسئلة: 16
- اختبار الموضوع 4: Printing, storage, retention and disposalعدد الأسئلة: 16
- اختبار الموضوع 5: Remote work, devices and cloud servicesعدد الأسئلة: 16
- اختبار الموضوع 6: Privacy breaches: spot, contain and reportعدد الأسئلة: 18
- الامتحان النهائي35 سؤالًا، 35 دقيقة · احصل على 80% أو أكثر
اختبار الموضوع 1: Classifying information and need-to-know
-
السؤال 1 من 16
أظهر الإجابة
الإجابة: C. Sorting it by the harm it could cause if it got out
Classifying sorts information by the harm it could cause if lost, changed or shared wrongly, so everyone knows how to handle it.
-
السؤال 2 من 16
أظهر الإجابة
الإجابة: B. They show at a glance how a document must be handled
A label is a quick signal about how to store, share and dispose of a document.
-
السؤال 3 من 16
أظهر الإجابة
الإجابة: B. In a way that matches how sensitive it is
The safeguards principle says to protect personal information in a way that is appropriate to its sensitivity.
-
السؤال 4 من 16
أظهر الإجابة
الإجابة: D. Public
Information that is already approved and published for anyone to see is Public.
-
السؤال 5 من 16
أظهر الإجابة
الإجابة: A. Internal
It is meant for staff only, and little harm would come from a leak, so Internal fits.
-
السؤال 6 من 16
أظهر الإجابة
الإجابة: C. Restricted
An alarm code could lead to serious harm if it leaked, so it belongs at the highest level, shared with a small named group.
-
السؤال 7 من 16
أظهر الإجابة
الإجابة: D. Protected: harm to a person or organization. Classified: harm to the national interest
Protected levels cover harm to a person or organization, while Classified levels cover harm to the national interest.
-
السؤال 8 من 16
أظهر الإجابة
الإجابة: C. Protected B
Protected A is injury, Protected B is serious injury and Protected C is extremely grave injury to a person or organization.
-
السؤال 9 من 16
أظهر الإجابة
الإجابة: D. Top Secret
Top Secret is the Classified level for exceptionally grave injury to the national interest.
-
السؤال 10 من 16
أظهر الإجابة
الإجابة: A. When you create it, at the top and bottom of the pages
Marking a document at the top and bottom as soon as it is created makes its level clear to every reader.
-
السؤال 11 من 16
أظهر الإجابة
الإجابة: C. At the level of its most sensitive part
Safeguards must match how sensitive the information is, so the most sensitive part sets the protection the whole document needs.
-
السؤال 12 من 16
أظهر الإجابة
الإجابة: D. No label does not mean public; use the approved release process
Unlabelled or unclassified information is not automatically public; it is released only through approved procedures.
-
السؤال 13 من 16
أظهر الإجابة
الإجابة: A. Combined records can cause much more harm if they leak
Bundled data can be more sensitive than its parts; one address may be Protected A, but 10,000 would be at least Protected B.
-
السؤال 14 من 16
أظهر الإجابة
الإجابة: C. You get access only to the information you need to do your job
Access should be limited to what each person needs for their work; rank or clearance alone does not give a right to see information.
-
السؤال 15 من 16
أظهر الإجابة
الإجابة: A. Politely decline and refer her to the file's owner
Nobody is entitled to information because of rank or clearance; access needs a legitimate need-to-know, which she has not shown.
-
السؤال 16 من 16
أظهر الإجابة
الإجابة: D. Treat it as Restricted for now and ask the document owner
When in doubt, protect information at the higher level and check with the owner or your security officer; protecting it too little is the bigger risk.
لوحة المفاتيح: 1–4 للإجابة، وEnter للسؤال التالي.
ما يجب معرفته قبل الاختبار
- Under PIPEDA, personal information is any factual or subjective information, recorded or not, about an identifiable individual.
- Alberta, British Columbia and Quebec have private-sector privacy laws considered substantially similar to PIPEDA; Ontario, New Brunswick, Nova Scotia, and Newfoundland and Labrador have substantially similar health information laws.
- Federally regulated organizations, such as banks, airlines and telecommunications companies, are always subject to PIPEDA, including for their employees' information.
- Under PIPEDA, a breach that creates a real risk of significant harm must be reported to the Privacy Commissioner, and affected people must be notified as soon as feasible.
- Organizations subject to PIPEDA must keep a record of every breach of security safeguards for two years, even breaches that are not reported.
- The Privacy Commissioner says there is no one-size-fits-all retention period; organizations should set minimum and maximum periods for each type of personal information.
- Government of Canada guidance says never to put protected, classified or personal information into public generative AI tools.
الأسئلة الشائعة
Is this an official privacy certification?
No. When you pass the final assessment you get a PassEveryTest Certificate of Completion, which shows you finished this general skills course. It is not an accredited qualification, it is not a vendor, employer or government certification, and it does not replace the privacy training your employer requires.
How does the final assessment work?
It has 35 questions drawn at random from the course question bank, with a 35-minute time limit. You need 80% to pass, and each attempt gives you a new mix of questions.
How is this different from the cybersecurity awareness course?
The cybersecurity course focuses on phishing, scams, passwords and multi-factor authentication. This course focuses on handling information itself: labels, need-to-know, sharing, keeping and destroying records, remote work and privacy breaches.
Which privacy law applies to my workplace?
It depends on the type of organization and where it works. Most private businesses are covered by PIPEDA, but Alberta, British Columbia and Quebec have their own private-sector laws, federal government institutions are under the Privacy Act, and provincial governments, municipalities, universities, schools and hospitals are generally under provincial or territorial laws. Ask your privacy officer.
What should I do if I send personal information to the wrong person?
Report it right away to your supervisor or privacy officer, as your policy says. They may ask the recipient to delete the information, return it securely or hold it for collection.
هل الشهادة معتمدة أو معترف بها رسميًا؟
لا. إنها شهادة إتمام خاصة للمعرفة فقط. وهي غير معترف بها أو معتمدة أو موافق عليها من أي حكومة أو جهة ترخيص أو هيئة تنظيمية أو مؤسسة تعليمية، ولا تحل محل أي رخصة أو شهادة أو تدريب يفرضه القانون.
المصادر
- Office of the Privacy Commissioner of Canada: PIPEDA in brief
- Office of the Privacy Commissioner of Canada: Summary of privacy laws in Canada
- Office of the Privacy Commissioner of Canada: PIPEDA fair information principle 1 - Accountability
- Office of the Privacy Commissioner of Canada: PIPEDA fair information principle 4 - Limiting collection
- Office of the Privacy Commissioner of Canada: PIPEDA fair information principle 5 - Limiting use, disclosure and retention
- Office of the Privacy Commissioner of Canada: PIPEDA fair information principle 7 - Safeguards
- Office of the Privacy Commissioner of Canada: What you need to know about mandatory reporting of breaches of security safeguards
- Office of the Privacy Commissioner of Canada: Contain a privacy breach at your business
- Office of the Privacy Commissioner of Canada: Prevent a privacy breach at your business
- Office of the Privacy Commissioner of Canada: Ten tips for addressing employee snooping
- Office of the Privacy Commissioner of Canada: Personal information retention and disposal: Principles and best practices
- Office of the Privacy Commissioner of Canada: Protecting workplace mobile devices
- Office of the Privacy Commissioner of Canada: Cloud computing for small and medium-sized enterprises
- Public Services and Procurement Canada: Levels of security
- National Defence (Maple Leaf, archived): Working with sensitive information
- Canadian Centre for Cyber Security: Cyber security tips for remote work (ITSAP.10.116)
- Office of the Information and Privacy Commissioner for British Columbia: Protecting personal information away from the office
- Office of the Saskatchewan Information and Privacy Commissioner: Investigation Report 062-2022 (group email without BCC)
- Office of the Information and Privacy Commissioner of Alberta: Guidance for notifying the OIPC about a privacy breach under PIPA
- Government of Canada: Generative AI in your daily work
- Get Cyber Safe: Why you should never give your personal information to AI