CIA Information Governance and Maintenance 4

Question 1

Under GDPR, which information governance obligation requires organizations to document what personal data they hold, where it is stored, and how it is used?

Accepted Answer

Records of processing activities (Article 30)

Answer

Article 30 of GDPR mandates that controllers maintain records of processing activities, which is a core information governance accountability requirement.

Question 2

What distinguishes a data governance policy from a data governance standard?

Accepted Answer

Policies state what must be achieved; standards define how to achieve it consistently

Answer

Policies express high-level mandatory intentions (the 'what'), while standards provide specific, measurable requirements for how to comply (the 'how').

Question 3

Which approach best supports continuous data quality improvement within a governance program?

Accepted Answer

Ongoing data quality KPIs monitored by stewards with escalation paths

Answer

Continuous monitoring with KPIs and escalation ensures issues are detected and resolved as they occur rather than accumulating until a periodic audit.

Question 4

An information architect must choose between active and passive metadata management strategies. What is the key difference?

Accepted Answer

Active metadata management dynamically updates and uses metadata to drive processes; passive simply stores it

Answer

Active metadata management uses metadata operationally to automate governance tasks such as lineage tracking and policy enforcement, unlike passive storage-only approaches.

Question 5

Which data lifecycle phase is most critical to govern in order to prevent accumulation of unnecessary sensitive data (data minimization)?

Accepted Answer

Data creation/ingestion

Answer

Governing data at creation or ingestion prevents unnecessary sensitive data from entering systems, directly enforcing data minimization at the source.

(CIA) Certified Information Architect Practice Test

(CIA) Certified Information Architect Practice Test

CIA Information Governance and Maintenance 4