CIP Information Governance and Strategy 3

Question 1

In the context of CIP, 'information stewardship' refers to:

Accepted Answer

Accountability for managing information assets on behalf of the organization

Answer

The IT department's responsibility for server maintenance

Answer

Archiving paper records in off-site storage

Answer

Drafting contracts with cloud service providers

Question 2

A 'litigation hold' (also called a legal hold) requires an organization to:

Accepted Answer

Suspend normal disposition of records potentially relevant to anticipated litigation

Answer

Encrypt all records above a certain sensitivity level

Answer

Restrict access to records to legal department staff only

Answer

Immediately destroy records not relevant to the lawsuit

Question 3

Which framework specifically addresses information governance for healthcare organizations in the United States?

Accepted Answer

HIPAA

Answer

SOX

Answer

GDPR

Answer

FERPA

Question 4

A data classification scheme that uses labels such as 'Public,' 'Internal,' 'Confidential,' and 'Restricted' supports IG by:

Accepted Answer

Enabling consistent, risk-appropriate handling policies for each category

Answer

Automatically encrypting all files upon creation

Answer

Replacing the need for access control lists

Answer

Satisfying all regulatory retention requirements automatically

Question 5

What is the primary purpose of an Information Governance Reference Model (IGRM)?

Accepted Answer

To illustrate how legal, IT, records, privacy, and business functions share responsibility for information

Answer

To replace an organization's existing ERM system

Answer

To serve as a technical architecture blueprint for data warehouses

Answer

To define mandatory retention periods for all record types

Question 6

Which of the following best describes 'dark data' in an enterprise context?

Accepted Answer

Information collected and stored but never analyzed or used for business value

Answer

Classified government records stored in secure vaults

Answer

Encrypted data that has lost its decryption key

Answer

Data backups stored in geographically remote locations

Question 7

An organization wants to align its IG program with ISO 15489. This standard primarily addresses:

Accepted Answer

Records management principles and processes

Answer

Information security management systems

Answer

IT service management best practices

Answer

Business continuity planning