CASE STUDY ON KRAFT FOODS INC.

NOTE: PLEASE ANSWER THE BELOW QUESTIONS

CASE STUDY QUESTIONS 1. How does the EU Directive on the Protection of Personal Data impose requirements on organizations in non-EU countries? 2. How does Kraft comply with EU data privacy regulations governing the protection of employee data? 3. The EU directive requires appropriate technical and organiza- tional controls to be in place to protect the confidentiality and integrity of personal data. How can an organization determine whether its security controls are appropriate? 4. What user access controls are in place for the UPPS and SAP HR systems? 5. How does Kraft implement the following access controls: need to know; least privilege; mandatory access control; and role-based access control? 6. Identify at least ten examples of specific HR data that are consid- ered sensitive at Kraft Foods Inc. 7. What is the purpose of Kraft's Code of Conduct for Compliance and Integrity? How is this information distributed to Kraft employees? 8. Why is Kraft moving away from the use of employee social security numbers for user identification on UPPS? 9. Through the UPPS, Kraft provides its employees online access to their own employee data. Why would Kraft do this? 10. Why would Kraft want to move all of its North American HR trans- actions from UPPS to SAP HR