Information Governance CGEIT Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   What is the primary purpose of information governance policies and standards within an enterprise?

   • ATo replace the need for individual judgment by automating all information-handling decisions.
   • BTo maximize the volume of information stored to support future analytics initiatives.
   • CTo ensure that information is managed consistently and in alignment with enterprise objectives and regulatory requirements.
   • DTo delegate all information governance responsibilities to external auditors.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A technology startup is creating its first information governance policy. The CEO wants the policy to be a single, comprehensive document that covers all aspects of information management. The legal team warns that a single document will be difficult to maintain and update. What structure should the startup adopt to balance comprehensiveness with maintainability?

   • ACreate a single policy document that is updated annually, regardless of changes in regulations.
   • BCreate a high-level policy framework with separate, detailed standards and procedures for specific areas like data privacy and retention.
   • CCreate a policy that only covers legal requirements and excludes operational best practices.
   • DCreate separate policies for every department, allowing each to define its own rules.
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   Which of the following is the correct sequence of stages in the information asset lifecycle?

   • ADisposal, creation, use, maintenance, retention
   • BMaintenance, creation, use, retention, disposal
   • CRetention, creation, use, maintenance, disposal
   • DCreation, use, maintenance, retention, disposal
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A hospital is implementing an information governance program. The chief medical officer has been named the information owner for patient medical records. The IT department is responsible for the servers and backup systems. The nursing staff regularly updates patient records. A nurse has noticed that some records contain outdated medication lists. Who is accountable for ensuring the accuracy of the medication lists?

   • AThe IT department, since they manage the system where the records are stored.
   • BThe nursing staff, since they are the ones who update the records.
   • CThe chief medical officer, as the information owner for patient medical records.
   • DThe nurse who noticed the issue, since they are the one who identified the problem.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A large retail corporation has a dispute between the marketing department and the legal department. Marketing wants to delete customer purchase history after 2 years to reduce storage costs, but legal insists that the data must be kept for 5 years to comply with tax regulations. The information governance policy does not clearly specify who has the final say. What should the corporation do to resolve this dispute efficiently?

   • ASplit the difference and retain the data for 3.5 years.
   • BLet the marketing department decide, since they are the primary users of the data.
   • CHave the IT department mediate the dispute, since they manage the storage systems.
   • DEscalate the dispute to the executive information governance committee, which has the authority to make a final decision.
   Reveal Solution Discussion Select an answer first