nerdexam
Isaca

CGEIT · Question #393

Of the following, who is PRIMARILY responsible for applying frameworks for the governance of IT to balance the need for security controls with business requirements?

The correct answer is B. Data stewards. Data stewards are primarily responsible for applying governance frameworks to balance security controls with business requirements for data, as they oversee data definitions, quality, security, and usage within an organization. They act as a liaison between business and…

Submitted by the_admin· Apr 18, 2026Governance of Enterprise IT

Question

Of the following, who is PRIMARILY responsible for applying frameworks for the governance of IT to balance the need for security controls with business requirements?

Options

  • AData scientists
  • BData stewards
  • CData analysts
  • DData processors

How the community answered

(27 responses)
  • A
    4% (1)
  • B
    78% (21)
  • C
    7% (2)
  • D
    11% (3)

Why each option

Data stewards are primarily responsible for applying governance frameworks to balance security controls with business requirements for data, as they oversee data definitions, quality, security, and usage within an organization. They act as a liaison between business and technical teams regarding data.

AData scientists

Data scientists focus on analyzing complex datasets to extract insights and build models, not on the governance frameworks themselves.

BData stewardsCorrect

Data stewards are primarily responsible for the governance of specific data assets, which includes ensuring data quality, security, privacy, and compliance with regulations and policies. Their role often involves balancing the need for security controls to protect data with the business requirements for data accessibility and use, guided by IT governance frameworks.

CData analysts

Data analysts primarily interpret data and generate reports, rather than establishing or applying governance frameworks.

DData processors

Data processors handle data on behalf of an organization and must adhere to security controls, but they are not typically responsible for establishing or balancing the governance frameworks.

Concept tested: Data stewardship responsibilities

Source: https://learn.microsoft.com/en-us/azure/architecture/guide/data-governance/data-steward

Topics

#Data Governance#IT Governance Roles#Information Security#Business-IT Alignment

Community Discussion

No community discussion yet for this question.

Full CGEIT Practice