CGRC Policy Development 5

Question 1

Which lifecycle phase comes IMMEDIATELY after a policy is formally approved?

Accepted Answer

Policy communication and implementation

Answer

After approval, the policy must be communicated to affected parties and implemented before it can be enforced or evaluated.

Question 2

An organization operating in multiple jurisdictions should PRIMARILY address differing legal requirements through:

Accepted Answer

A master policy with jurisdiction-specific addenda or supplements

Answer

A master policy with jurisdiction-specific supplements maintains global consistency while accommodating local legal differences.

Question 3

What is the PRIMARY purpose of version control in policy management?

Accepted Answer

To track changes over time and maintain an authoritative current version

Answer

Version control maintains a history of changes, clearly identifies the current approved version, and prevents confusion from multiple conflicting drafts.

Question 4

An acceptable use policy (AUP) MOST commonly governs:

Accepted Answer

Employee use of organizational IT assets and systems

Answer

AUPs define acceptable and unacceptable use of organizational technology resources such as computers, networks, email, and internet access.

Question 5

Which metric BEST measures the effectiveness of a policy communication campaign?

Accepted Answer

The percentage of employees who have acknowledged and understood the policy

Answer

Acknowledgment rates with comprehension checks directly measure whether the communication reached and was understood by the intended audience.

CGRC - Certified Governance Risk and Compliance Practice Test

CGRC - Certified Governance Risk and Compliance Practice Test

CGRC Policy Development 5