IsacaIsaca
CGEIT · Question #72
CGEIT Question #72: Real Exam Question with Answer & Explanation
Sign in or unlock CGEIT to reveal the answer and full explanation for question #72. The question stem and answer options stay visible for context.
Submitted by ngozi_ng· Apr 18, 2026Risk Optimization
Question
An audit report has revealed that data scientists are analyzing sensitive "big data" files using an offsite cloud because corporate servers do not have the necessary processing capabilities. A review of policies indicates this practice is not prohibited. Which of the following should be the FIRST strategic action to address the report?
Options
- AAuthorize a risk analysis of the practice.
- BUpdate data governance practices.
- CRevise the information security policy.
- DRecommend the use of a private cloud.
Unlock CGEIT to see the answer
You've previewed enough free CGEIT questions. Unlock CGEIT for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Risk analysis#Cloud governance#Policy gap#Strategic planning