Federal IT Security Professional (FITSP) Operator Practice Test

The main idea tested is which memo establishes the privacy obligations that cover how agencies handle personal data, including conducting Privacy Impact Assessments, publishing System of Records Notices, and providing privacy training. The memo named M-07-16 sets out those privacy program requirements and the need for ongoing privacy reporting, tying together PIA, SORN, and training into a cohesive framework. This is why it’s the best fit for the question, as the other memos focus on different policy areas and do not specifically bundle these privacy elements together in the same way.