CGEIT · Question #241
An enterprise experiencing issues with data protection and least privilege is implementing enterprise-wide data encryption in response Which of the following is the BEST approach to ensure all busines
The correct answer is D. Mandate the creation of a data governance framework.. To ensure all business units consistently work towards remediating data protection and least privilege issues through data encryption, the best approach is to establish a foundational data governance framework. This framework provides the overarching structure, policies, and resp
Question
An enterprise experiencing issues with data protection and least privilege is implementing enterprise-wide data encryption in response Which of the following is the BEST approach to ensure all business units work toward remediating these issues?
Options
- ADevelop key performance indicators (KPIs) to measure enterprise adoption.
- BIntegrate data encryption requirements into existing and planned projects.
- CAssign owners for data governance initiatives.
- DMandate the creation of a data governance framework.
How the community answered
(50 responses)- A2% (1)
- B12% (6)
- C8% (4)
- D78% (39)
Why each option
To ensure all business units consistently work towards remediating data protection and least privilege issues through data encryption, the best approach is to establish a foundational data governance framework. This framework provides the overarching structure, policies, and responsibilities for managing data protection across the enterprise.
Developing KPIs measures adoption but doesn't provide the initial structure or mandate for how all business units should operate.
Integrating requirements into projects is a tactical step within an existing framework, not the best approach to ensure all units work towards remediation initially.
Assigning owners is a component of a data governance framework, but doesn't establish the comprehensive structure itself for enterprise-wide alignment.
Mandating the creation of a data governance framework establishes the policies, processes, roles, and responsibilities necessary to ensure consistent implementation and adherence to data encryption requirements across all business units. This framework provides the foundational structure for enforcing data protection standards and promoting least privilege principles enterprise-wide.
Concept tested: Data Governance Framework Implementation
Topics
Community Discussion
No community discussion yet for this question.