CEICC case studies
CEICC · Put your knowledge to work in context.
The Certified Expert in International Compliance and Cybersecurity (CEICC) is a vendor-neutral credential for professionals who sit where regulatory obligation meets technical security - compliance officers moving into cyber, security managers who own regulatory mapping, and consultants serving multinational clients. The exam tests breadth across seven domains: compliance frameworks and the regulatory landscape, international data protection and privacy law, cybersecurity governance and risk management, security controls and technical safeguards, incident response and breach notification, third-party and supply chain risk, and audit, assurance, and compliance monitoring. The CEICC case studies are 5 cases and about 2,850 words.
1The 72-Hour Clock vs. the Forensic Investigation
You are the CISO of a mid-sized EU-based SaaS provider. On Friday at 16:00, your security team detects anomalous outbound traffic from a production database server.
597 words, about 3 min2The Vendor's Subprocessor in a Non-Adequate Country
You are the compliance lead for a US-based healthcare technology company that provides a patient portal to EU hospitals. Your company uses a cloud-based CRM vendor (Vendor A) to manage customer support tickets.
629 words, about 3 min3The Auditor's Finding on Access Reviews
You are the head of compliance for a financial services firm subject to SOC 2 Type II and ISO 27001. During an internal audit, you find that quarterly access reviews for the customer database were not performed for two consecutive quarters (Q3 and Q4 of last year).
568 words, about 3 min4The Supply Chain Attack on a Critical Component
You are the security architect for a company that manufactures IoT medical devices. Your devices use a third-party software library (LibX) for encryption.
573 words, about 3 min5The Cross-Border Data Transfer After Schrems II
You are the DPO for a multinational retailer with headquarters in France. The company uses a US-based cloud provider for its customer loyalty program, which stores names, purchase history, and email addresses of 2 million EU customers.
483 words, about 2 min