Are you familiar with information security/data privacy/computer crime and the applicability of these requirements to the handling of clients' personal data?
Have you ever completed information security/data privacy/computer crime training
Have you ever been responsible for information security/data privacy/computer crime breach?
Have you been subject to any regulatory or legal action involving information security/data privacy/computer crime?