← All CIP Flashcard Decks

Information Governance and Strategy Flashcards

7 cards from real CIP practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Information Governance and Strategy flashcards as text
  1. Which role is typically responsible for defining IG policies across an entire enterprise?

    Answer: Chief Information Governance Officer (CIGO) or equivalent executive

    Enterprise-wide IG policy authority rests with a senior governance executive who can mandate compliance across business units.

  2. The concept of 'defensible disposition' in records management means:

    Answer: Destroying records according to a documented, consistently applied retention schedule

    Defensible disposition demonstrates that record destruction followed a lawful, documented, and consistently applied process — not selective deletion.

  3. A company stores customer PII in three different countries. Which IG consideration becomes most complex?

    Answer: Cross-border data transfer restrictions and differing national privacy laws

    Multi-jurisdictional data storage triggers varying national laws (e.g., GDPR, China's PIPL) that may conflict regarding transfers and retention.

  4. In IG strategy development, a RACI matrix is used to:

    Answer: Assign Responsible, Accountable, Consulted, and Informed roles for governance tasks

    A RACI matrix clarifies who performs, owns, advises, and receives updates for each IG activity, eliminating role ambiguity.

  5. Which of the following is an example of an 'information governance policy' rather than an 'information governance procedure'?

    Answer: 'All confidential records must be encrypted at rest and in transit.'

    A policy states a high-level rule or requirement; procedures describe step-by-step instructions for implementing that rule.

  6. Enterprise content management (ECM) systems support IG primarily by:

    Answer: Providing centralized capture, storage, retrieval, and disposition of content

    ECM platforms enable IG by managing content through its full life cycle with controlled access, versioning, and disposition workflows.

  7. When an IG program undergoes a maturity assessment, a score of 'Level 1 - Initial' typically means:

    Answer: Processes are ad hoc and undocumented, with no consistent governance practices

    Maturity Level 1 indicates an organization lacks formal, repeatable processes — governance happens informally if at all.