Information Governance CGEIT Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What is the purpose of applying lifecycle management controls to information assets?

   • ATo automate all decisions related to information without human intervention.
   • BTo centralize all information in a single repository for easier access.
   • CTo minimize the cost of storage by deleting all information as soon as possible.
   • DTo ensure that information is managed consistently and in compliance with requirements while maximizing its value.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A healthcare provider is developing a new policy for patient record access. The policy has been drafted by the information governance office, but the clinical staff union is concerned that the policy will slow down emergency care. The provider's legal counsel has approved the draft. What is the most effective next step in the policy development and enforcement process?

   • ADefer the policy indefinitely until the union and legal counsel reach a unanimous agreement on every clause.
   • BSend the policy to the union for a vote, and if rejected, abandon the policy entirely.
   • CPublish the policy immediately since legal has approved it, and mandate training for all clinical staff within 30 days.
   • DConduct a pilot program in one emergency department, gather feedback, and revise the policy before enterprise-wide rollout.
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   Which of the following is an example of a lifecycle management control during the 'use' stage?

   • ASecurely erasing data from decommissioned storage devices.
   • BScheduling regular backups of the information.
   • CDefining retention periods based on legal requirements.
   • DImplementing access controls to ensure only authorized users can view or modify information.
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   A university is implementing an information governance program. The registrar's office is responsible for the accuracy of student records, the IT department manages the servers where the records are stored, and the records management office handles the retention schedule. A student has requested a correction to their transcript, but the registrar and the records management office disagree on whether the original transcript can be amended. Who has the authority to make the final decision?

   • AThe registrar's office, as the designated information owner for student records.
   • BThe IT department, because they control the system where the record is stored.
   • CThe student, because the record pertains to them personally.
   • DThe records management office, because they control the retention schedule.
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   How should information classified as 'restricted' be transmitted?

   • AUsing a secure, encrypted channel to protect the information from interception.
   • BVia standard email without encryption for speed and convenience.
   • CBy posting it on an internal shared drive accessible to all employees.
   • DUsing a courier service without any special packaging or labeling.
   Reveal Solution Discussion Select an answer first