nerdexam
Isaca

CGEIT · Question #229

A new and expanding enterprise has recently received a report indicating 90% of its data has been collected in just the last six months, triggering data breach and privacy concerns. What should be…

The correct answer is D. Assess the information governance framework. An information governance framework defines the policies, roles, responsibilities, controls, and processes for managing data across the enterprise. Assessing this framework first allows the committee to understand the current state of data management, identify gaps, and…

Submitted by eva_at· Apr 18, 2026Governance of Enterprise IT

Question

A new and expanding enterprise has recently received a report indicating 90% of its data has been collected in just the last six months, triggering data breach and privacy concerns. What should be the IT steering committee's FIRST course of action to ensure new data is managed effectively?

Options

  • AMitigate and track data-related issues and risks.
  • BModify legal and regulatory data requirements.
  • CDefine data protection and privacy practices.
  • DAssess the information governance framework.

How the community answered

(26 responses)
  • A
    15% (4)
  • B
    8% (2)
  • C
    12% (3)
  • D
    65% (17)

Explanation

An information governance framework defines the policies, roles, responsibilities, controls, and processes for managing data across the enterprise. Assessing this framework first allows the committee to understand the current state of data management, identify gaps, and determine what improvements or controls are needed to handle the surge in data volume and associated risks effectively.

Topics

#Information Governance#IT Steering Committee#Data Privacy#Governance Framework Assessment

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice